Are SQL injections still a threat?
<p>I've been wondering if SQL injections are still a possible threat for everyday, normal websites, with parameterized SQL. (ASP.NET - '@0').</p>

<p>If it is still a threat, how would crackers override or get around these parameters?</p>