CWE - 2011 CWE/SANS Top 25 Most Dangerous Software Errors

Common Weakness Enumeration (CWE) is a list of software weaknesses. ... CWE-89 - SQL injection - delivers the knockout punch of security weaknesses in 2011. For data-rich software applications, SQL injection is the means to steal the keys to the kingdom.

cwe.mitre.org