Hisense SQL injection + Weak Password

We can't afford to buy TV in house decoration. We can't afford to buy sharp or Sony. Look at Hisense in China and look at it. We can see the vulnerability. mysql root has a blank password in the background, it seems that Weibo can still be sent through this site, but the website is doing quite well, but the security is far worse.

Injection point: http://itvdetail.hisense.com/product.php? Id = 2
 
Mysql root and two other users
 
 
 
 
 
Although this password is paid, it takes a lot of courage to set it to the same password.
 
 



 
Solution:

To strengthen the security system, I don't know if there are such vulnerabilities in other places .. To change the password that is difficult but hard to forget, refer to the non-mainstream naming method. For example: Wo_Hai | Shi_Chu ~ NanD4nShiWoAIhaix1N !!
 
In the end, I wish you better and better, and let Chinese brands go out of the world!