What does SQL injection mean on the CPA exam?

SQL injection. An attack that smuggles database commands through a field meant for ordinary input. Prevented by parameterised queries, which keep the data from ever being read as instructions.

Defined against OWASP Top 10.

Which CPA exam sections use SQL injection?

SQL injection appears in the ISC section of the CPA exam.

Related terms

• application controls: Controls built into one business process or system, such as a validity check on an input field or a three-way match.

See also

• Every CPA exam term in this glossary
• The CPA exam, section by section
• A free FAR mock exam