Source

"One of the cardinal rules of computer programming is to never trust your input. This holds especially true when your input comes from users, and even more so when it comes from the anonymous, general public. Apparently, the developers at Oklahoma’s Department of Corrections slept through that day in computer science class, and even managed to skip all of Common Sense 101. You see, not only did they trust anonymous user input on their public-facing website, but they blindly executed it and displayed whatever came back.

The result of this negligently bad coding has some rather serious consequences: the names, addresses, and social security numbers of tens of thousands of Oklahoma residents were made available to the general public for a period of at least three years. Up until yesterday, April 13 2008, anyone with a web browser and the knowledge from Chapter One of SQL For Dummies could have easily accessed – and possibly, changed – any data within the DOC’s databases. It took me all of a minute to figure out how to download 10,597 records – SSNs and all – from their website..."

Follow source to realize the full stupidity behind this website, with pictures. It's just so mindblowingly stupid I can't even talk about it in detail.

ok, so for more detail.

Basically they put their SQL queries as a parameter in the HTML code.

Example: If you look at the address for this page it has "..../thread.php?id=23892". The id is the parameter and the value is after the =. However, ioi never let's you see what SQL queries he is actually running so you don't know the design of the database or how to immediately create usable SQL injections. On the OK site, it showed the entire sql query. Anyone with basic SQL knowledge could create their own queries and it would return the results. So a quick query to ALL_TABLES would return you a list of the table design. Then using that with ALL_TAB_COLS would allow you to build any query you want to gain any information that was available.

It happened in the UK. The government lost discs containing the addresses, bank details, etc of every parent in the country receiving child allowance. It completely derailed their ID card plans, the polls massively switched against them as it showed for all to see that governments are not to be trusted with our personal data.

 You linked to VGChartz

 hahahahahahahaha. That is funny. Ok fixed now.