Am I immune to SQL injections if I use stored procedures?

Question

Lets say on MySQL database (if it matters).

Answer 1

nope. If you're constructing SQL that invokes a stored procedure you're still a target.

You should be creating parametized queries on the client side.