Bob is developing a web application that depends on a backend database. What type of attack could a malicious individual use to send commands through his web application to the database?

Question $9$ options:

Cross$-$site scripting $($XSS$)$

Extensible Markup Language $($XML$)$ injection

Structured Query Language $($SQL$)$ injection

Lightweight Directory Access Protocol $($LDAP$)$ injection