Hacker News new | ask | show | jobs
by a904guy 4696 days ago
Django... https://github.com/search?q=extension%3Apy+os.system+%22requ...
2 comments

The difference is that SQL injection will only happen when using raw queries.

System (as you mentioned) or EXEC injections, however, may get out of hand.

I only found one exploitable example browsing the first few pages, whereas the majority of the OP's results looked fairly exploitable.