> Also - shouldn't the web be full off vurnurable database servers then?
You can search for open database servers there, which should answer your question.