I noticed that they are willing to give away passwords, but not willing to point out the SQL injection.
http://www.sonypictures.com/homevideo/ghostbusters/photouplo...
http://lulzsecurity.com/releases/sownage_FILE%20CONTENTS.txt
SonyPictures.com has been owned,
this is its SQLi hole:
## http://www.sonypictures.com/homevideo/ghostbusters/photoupload/view.php?id=12838 ##
TEAR THE LIVING SHIT OUT OF IT WHILE YOU CAN; TAKE FROM THEM EVERYTHING!