SQL injections are frequently used to attack database systems. When an application accesses the data of an SQL database, SQL commands are transmitted to the DBMS. If input data within the application is not validated sufficiently, attackers can import their own SQL commands into the application that can then be edited with the authorisation of the application’s service account. This way, an attacker may read, manipulate, or delete data; add new data; or even call system commands. Although SQL injections primarily affect front-end applications, they can also have a significant impact on the database system itself and the related infrastructure.