From Wikipedia:

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application

Here's a link to a great reference against SQL Injection attacks: how to recognize the flaws and fight them!