Most of the information and control were given through SQL injection.
The hack was done with a simple SQL injection.
A few of them are vulnerable to SQL injections on certain strings.
SQL injection is possible when the code that deals with these parameters is faulty.
And if somebody does SQL injection and gets customer data, it's a bad thing.
SQL injection is a technique often used to attack data driven applications.
It's not the only thing you can do with SQL injection.
A lot of forums had problems with SQL injections.
I'd guess that they would protect against SQL injection.
But this one is a SQL injection; right?