Which security vulnerability involves an attacker injecting malicious SQL code into input fields?

SQL Injection is a security vulnerability where an attacker injects malicious SQL code into input fields of a web application, exploiting vulnerabilities in the database layer. This allows the attacker to execute unauthorized SQL commands, manipulate data, and potentially compromise the entire database system. Proper input validation and parameterized queries can mitigate the risk of SQL injection attacks.