LDAP (Lightweight Directory Access Protocol ) Injection is defined as
an injection attack used by attacker to exploit web based applications by inserting LDAP statements based on user input.
It may be possible modify LDAP statements through some techniques if an application fails to properly sanitize user input.
So,<u> LDAP injection</u> is the attack that allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database's information.
