All three are related to computer hacking technique. Buffer overflow input a piece of data bigger than the intended data type that when the program writes to a buffer that overruns the buffer and overwrites the adjacent memory. Where sql injection uses some special character to input field to create ambiguous input to attack the database.