Hacker News new | ask | show | jobs
by a904guy 4743 days ago
Django... https://github.com/search?q=extension%3Apy+os.system+%22requ...
2 comments
fjcaetano 4743 days ago
The difference is that SQL injection will only happen when using raw queries.

System (as you mentioned) or EXEC injections, however, may get out of hand.

link
ris 4743 days ago
I only found one exploitable example browsing the first few pages, whereas the majority of the OP's results looked fairly exploitable.
link