My bank doesn't allow the characters you would need for a SQL injection in passwords. Checked client side, I don't want to try and find out if it's also checked server side, but I hope it is.

I've been using ARES Commander for a few years now as an AutoCAD alternative on Linux.

An there is also BricsCAD for which the 3d options seem to better developed than with ARES.