SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
CWE-89