一道SQL注入的题

后端JAVA写的
conn.prepareStatement("SELECT itemId, perCentOff, itemName FROM coupons JOIN items USING (itemId) WHERE couponCode = '" + couponCode + "';")
couponCode是注入点吗，该如何注入呢？