SQLMap: The automated SQL Injection and database takeover tool
sqlmap.org
sqlmap.org
If you are a programmer, or manage websites for somebody else it should be your duty to know that this tool exists and how easy it is to completely empty out a database. (this is how 99% of the 'sql password dump for major site $x' are generated.
How does it work? Please watch the video: http://www.youtube.com/watch?feature=player_embedded&v=RsQ52...
Please post the results :)