Yahoo doesn’t have a cure for SQL injection problem