Researchers say a bug let them add fake pilots to rosters used for TSA checks. TSA security could be easily bypassed by using a simple SQL injection technique, say security researchers.