1 story taggedkhunt.
A rarely seen technique let intruders run commands, steal password data and browse files from within the database, after breaking in through a sloppy search box.