The question concerns a hypothetical college that just learned that sensitive information has been stolen from a student information system and posted on the Web. The college IT security team believes that the source of the problem is a SQL injection vulnerability. The vulnerability appears to exist in a web application used by students to register for courses. The task is to create an incident response report to provide details about this type of vulnerability, how an attacker might exploit it, and methods of detection and removal. It should detail the following information:

A non-technical description of SQL injection vulnerabilities intended for a college management audience. Thanks.