SQL injection attacks are the workhorses of hacking incidents, tricking web sites into spilling credit card numbers and other sensitive data to hackers.

Source: Hacker Lexicon: SQL Injections, an Everyday Hacker’s Favorite Attack | WIRED