Joel over at appiant.net has posted a great video of how he used SQL injection to bypass security controls on a college website.
While his methods may seem 1-2-3 to web application security testers, they are a great example of just how simple this type of attack is, and a reminder that you MUST perform this same type of testing on EVERY web application you deploy, period.
The link for this article located at IT Toolbox is no longer available.
