Sqlreport has a sql/RFI exploit. awaiting confirmation on exact developer. Feb 20 Not Known