Finding SQL injection vulnerabilities with Google

This is a very interesting post about someone finding SQL injection vulnerabilities with Google.

His result is that 11.3% of sites from the initial population of URL's he tested are vulnerable, which is way too high.

This is from SPIDynamics, a web apps security company, creators of WebInspect, and a company from which I have received training.

(Via Bruce Schneier)