---
title: "code injection"
description: "A type of security attack performed by inserting malicious code at an interface into an application to exploit poor handling of untrusted data."
type: term
term_id: 780
language: English
language_code: gb
canonical: "https://glossary.istqb.org/en/term/code-injection"
slug: "code-injection"
url: "https://istqb-glossary.page/code-injection/"
---

# code injection

A type of security attack performed by inserting malicious code at an interface into an application to exploit poor handling of untrusted data.

## Present in syllabi


- Foundation Extension - Mobile Application Testing 2019
- Advanced Technical Test Analyst 2019

## Translations


- [Deutsch](https://istqb-glossary.page/de/code-einschleusung/) — Code-Einschleusung
- [Português (Brasil)](https://istqb-glossary.page/br/injecao-de-codigo/) — injeção de código
- [Polski](https://istqb-glossary.page/pl/wstrzykniecie-kodu/) — wstrzyknięcie kodu
- [Português](https://istqb-glossary.page/pt/injecao-de-codigo/) — injeção de código
- [Čeština](https://istqb-glossary.page/cz/vlozeni-kodu-code-injection/) — vložení kódu (code injection)
- [Norsk](https://istqb-glossary.page/no/kodeinjeksjon/) — kodeinjeksjon

Read this term online: https://istqb-glossary.page/code-injection/

Markdown variant of the HTML page at https://istqb-glossary.page/code-injection/ — part of the
ISTQB Glossary (https://istqb-glossary.page), a linkable, machine-readable
republication of the ISTQB glossary under fair use. No affiliation with ISTQB.