It may not be a direct indicator of their vulnerability to SQL injection, but it is a pretty good indicator of their placement on the clulessness scale.

clueless<-------------------->cluefull

        ^
        |

Right about here I'd say.