SQL Injection isn't even a problem of SQL, it's a problem of the applications those databases are connected to.