A security analyst reviewing web server logs for an e-commerce application notices repeated requests to the login page that contain strings such as ' OR '1'='1 and UNION SELECT username,password FROM users--. Shortly afterward, the application returned database error messages containing table and column names in the HTTP response. Which type of attack does this activity indicate?