[mothered]

like SQL Injection

Code Injection Is a very common attack vector.

In-Band SQLi, namely Union-Based & Error-Based are widely used In vulnerable applications to gain back-end access to the database. Content-Based/Boolean-Based & Out-Of-Band SQLi (not so common) are also very effective where applicable. Of course, In order to manipulate the database, sound knowledge of SQL Is paramount.