Injection Attack
Also: SQL injection, LDAP injection, Command injection
PCIComplianceHubLast updated
A type of security vulnerability that occurs when an attacker is able to insert or inject malicious code or commands into an application or system, potentially leading to unauthorized access, data theft, or other adverse consequences.
In PCI DSS v4.0.1. 6.2.4
Related. Secure Coding, Cross-site Scripting (XSS), Web Application, Vulnerability, Web Application Firewall (WAF)
Sources. PCI DSS v4.0.1 (June 2024)