An SQL injection flaw has been detected on the Yahoo! website.