Here's what I get from a PCI Compliance scan
Possible blind sql injection on http://www.mysite.com/index.php?amp=&main_page=index wp --bsql "http://www.mysite.com/index.php?amp=&main_page=index" "http://www.mysite.com/index.php?amp=&main_page=index+and+1%3D1" "http://www.mysite.com/index.php?amp=&main_page=index+and+1%3D0" cat <<EOF > bsql.sh curl -L "http://www.mysite.com/index.php?amp=&main_page=index+and+1%3D1"> a curl -L "http://www.mysite.com/index.php?amp=&main_page=index+and+1%3D0"> b diff a b EOF sh bsql.sh This website may have other injection related vulnerabilities.
Is this something that can be fixed by the change to application top?