B. Database SQL injection is an application layer attack that targets the database associated with a web application. Attackers exploit vulnerabilities in the web application's input validation and construct malicious SQL queries that are then executed against the database. The goal is to manipulate the database and potentially steal, modify, or delete data stored within it. SQL injection attacks can be used to gain unauthorized access to sensitive information or even take control of the web application's database.

B. Database SQL Injection involves bypassing the normal methods of accessing the database content and injecting SQL queries and statements directly to the database through the web application in order to steal, manipulate or delete the content. System access is even possible in some instances where the database is able to manipulate system resources, this can end up with entire system compromise and attackers in your network (not only stealing all your data).