The Democrat Herald brings the story of the theft
of personal information from as many as 4,700 online customers of the
Oregon State University Bookstore who used credit cards to purchase items.
This attacks sounds like it was taken from a textbook. Below you can see an example of an SQL Injection on one of Imperva's demo application that's probably very similar to what happened at OSU. (Hear the voice of Mr. Terry Ray). A WAF could have helped here.
Leave a comment