Hacking Apple - SQL Injection to Remote Code Execution

(2024) although that doesn't really excuse the coldfusion and sql injection content of this post

also, the title elided the "'s travel booking site" part, but I guess it depends on what kind of exciting data was available for exfiltration