This traditional database platforms, known as relational database management systems (RDBMS) all use a language called SQL (structured query language).
By entering certain strings of text into user input boxes on Web sites, cybercriminals are able to confuse their commands with data in a site's StructuredQuery Language (SQL) database and gain control of it, says Grossman.