SQL injection exploits vulnerabilities in database queries to gain unauthorized access to data. This cybercrime often targets websites with weak input validation, allowing attackers to insert malicious SQL code into query fields. Once successful, cybercriminals can retrieve, modify, or delete sensitive information.