Everything SecOps Signal has reported about SQL Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity SQL injection in JSON-SCADA lets logged-in users alter historian records through specific API parameters in versions prior to 0.65-alpha.
Rapid7 found that a SOAP endpoint in Channel Software WebAlliance allows attackers to execute SQL commands on backend servers without credentials.
Parameterized queries separate code from data by forcing the database to treat user input as literal values, making it impossible for an attacker to inject malicious commands.