Theoretically <3
Clients that are using SQL without user input sanitization, hit it with an SQL injection and see what happens.