Flashpoint interview question

What is a SQL injection and Buffer overflow.