SQL Injection Sophisticated?
SQL injection is a well know attack method to gain access to a database that can be defeated by competent parameterization of user input. More like the incompetent coding than a sophisticated attack. From my company's security training, often attackers will use social engineering tricks to get or install there malwares.