Attack potential of the SQL injection flaw