It's very important to outline that SQL Inject...

2009-12-18T16:58:28.525-08:00

It's very important to outline that SQL Injection attacks can be used directly to steal credit card data if the affected site is an e-commerce site.

Many online shops have the payment gateway configurations stored inside the database. An attacker could modify these information via SQL injection of course and then route the billing requests to his evil payment proxy. Hey, this is not a Phishing Attack, just a trick to transparently sniff the user data.

Comments on Minded Security Blog: OWASP-Italy interviewed by Repubblica.it

It's very important to outline that SQL Inject...