Hackers pants antivirus database

A good cook can burn a dish, a good outfielder can drop a can o' corn, and a good antivirus company can apparently have a big gap in their database defenses, as poster "unu" makes abundantly clear at HackersBlog at the moment.

The compromised site is kaspersky.com, and though unu was kind enough to blot out some of the crucial details of the vulnerability in his/her post, it appears that simply changing a few parameters breaches a SQL database containing users, activation codes... well, unu provides quite the list of tables. Can't have been much of a fun weekend over at Kaspersky with that flapping in the breeze.