Question

In what type of attack does the attacker send unauthorized commands directly to a database?

Answer 1

SQL injection. This is usually cause by the programmer not making the program parse incoming text, therefore allowing an attacker to input database commands.