In many database management systems, it is possible to automate certain actions. To this end, scripts are executed in the context of a database, including with the help of the Procedural Language/Structured Query Language (PL/SQL). This also includes database triggers. However, if these are not checked by the process owner before they are used, the database scripts may not meet the software development requirements of the respective organisation.

An attacker may also manipulate data dictionary tables or other core functions of a database with the help of malware or database scripts, for example. Detecting this kind of attack is very hard. Malware and low-quality scripts can endanger the confidentiality, integrity, and availability of the data stored in databases.