Injection is not always about SQL I give two real-world examples of vulnerabilities allowing for SQL injection.