Characters written into an input form are treated as part of a command to the database. This is the basis of SQL injection.
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. Metabase disclosed the ...