How SQL injection attack works ?

 Allowing an attacker to manipulate the SQL query string sent to the database.

SQL injection attack is performed by manipulating SQL query parameters to retrieve confidential data or execute commands from the underlying database without proper authorization.