SQL Injection is a cyber attack technique that exploits vulnerabilities in a web application's software by inserting malicious SQL statements into an entry field. This can allow unauthorized access to the underlying database, leading to data theft, data corruption, or denial of service.