A hacker going with the handle of @WilyXem on Twitter has claimed to found SQL vulnerabilities on the official website of Pakistan Army, Vatican Catholic Church and Italian Chamber of Commerce.
WilyXem explained that these vulnerabilities can be further exploited easily to deface or access the secret information on the server.
Details of each vulnerability with its screenshot is mentioned below, all screenshots have been provided by WilyXem.
Pakistani Army Website MsSQL Injection Vulnerability Disclosure:
Vatican Catholic Church MySQL Vulnerability Disclosure: