Any application that queries a database using user-entered data, including Windows Forms applications is a potential target of an injection attack.

使用用户输入的数据查询数据库的任何应用程序(包括Windows窗体应用程序)都是Injection攻击的潜在目标。