Originally Posted by mrwilson

Custom scripts are harder, bigger sites have one off custom scripts..

The scripts that seem to get exploited easy are ones that are available to the public.
Ones that either cost a small fee or those that are freeware, scripts such as wordpress, smf, mybb.
Just search google.