To store all the information about the patients, medical services use databases servers, which, if not configured correctly are vulnerable to <SQL injection>, with the SQL injection the attacker has power over all the three goals of information security, confidentiality, integrity and availability, they can see, delete, steal or change information;