1. A database or system query that is executed dynamically at runtime without security protections against malicious input, such as SQL injection attacks
The application was vulnerable because it used unprotected dynamic queries to fetch user data
A aplicação era vulnerável porque usava consultas dinâmicas não protegidas para buscar dados de usuários
2. A query constructed from user input without proper sanitization or parameterization
Developers should avoid unprotected dynamic queries and use prepared statements instead
Desenvolvedores devem evitar consultas dinâmicas não protegidas e usar instruções preparadas em vez disso