SQL injection attacks: A cheat sheet for business ... OOB attacks involve submitting a DNS or HTTP query to the SQL server that contains an SQL statement. ... (as well as more details and examples).