Which of the following statements is not true regarding Structured Query Language $($SQL$)$ injections?

A$.$ They can be used to execute arbitrary SQL commands through a web application.

B$.$ They can be used to inject SQL commands to exploit unvalidated input vulnerabilities in a web application database.

C$.$ They do not require considerable skill to execute.

D$.$ They involve the attacker "injecting" SQL code into an input box or form with the goal of gaining unauthorized access or altering data.