BAE Systems interview question

Questions was on sql injections, cross site scripts and database sqls