I get that - but in a majority of cases, isn&#x27;t &quot;juicy&quot; information going to be held in the DB anyway? Sure, you won&#x27;t be able to go in through the &quot;front door&quot;, but if you can get a copy of the password hash from a database dump is it not pretty much game-over anyway?<p>If you&#x27;re able to perform SQL injection against the DB, would you not be able to change the password in order to gain access to the system, or grant admin privileges to your own accoun