I'm sorry I disagree , you're assuming that the "application" is vulnerable to sql injection and others.