Out-of-band SQL Injection occurs when the result of the attacker’s activities is received using another channel (for example, sent to another server). This is, for example, possible using the xp_dirtree command in MS SQL and the UTL_HTTP package in Oracle.
See how AcuMonitor is a unique technology that lets Acunetix discovers OOB SQLi.