Only 48 percent of respondents to a recent survey indicated that they test or validate third-party software to ensure it’s not vulnerable to SQL injection.