UNC Chapel Hill Interview Question

Why is SQL injection constantly in the OWASP top 10?