Magento sites under attack through easily exploitable SQLi flaw

(Source: Help Net Security) PRODSECBUG-2198 was discovered and reported by Charles Fol, a security engineer at Ambionics, and the security updates and patches were released two …