Hacker News Reader

Input isn't properly sanitized by the server thus allowing an attacker to run code through the database. Fairly easy to test for.

View on HN

It's pretty embarrassing that none of these big corporations (PBS, Sony) can't even take some time to test for security flaws considering that SQL injection like you mentioned is easy to test for.

Reply on news.ycombinator.com