Hacker News new | ask | show | jobs
by woodall 5478 days ago
Input isn't properly sanitized by the server thus allowing an attacker to run code through the database. Fairly easy to test for.
1 comments

It's pretty embarrassing that none of these big corporations (PBS, Sony) can't even take some time to test for security flaws considering that SQL injection like you mentioned is easy to test for.