It wasn't *only* SQL injection, but it shows how far you can go if a company exposes its soft and fleshy parts to the internet.