Blind SQL injection and remote code execution in Flickr | Hacker News Reader