Emilia is a cybersecurity analyst with an application programming background. She has been tasked to work with some of the company's web application programmers to ensure that they are considering security in their programming logic. During application security tests, Emilia discovers that she can input statements into a username field that will return a list of users from the application's back-end database. Emilia has discovered that the web application is vulnerable to which of the following types of attack?