Re: RE: Re: about oracle sql injection

[limor188 () walla co il]

hey thanks for your answer,by the way my problem is not a blind,because the server return error messages,but thier is  
a filter that denied the command:(union select)

so i try to put a comment to bypass the signature,or make a url encoding,or pipe,but its still dosent working,so my 
question:there is more ways to bypass the signture (union select)??????????

if there is any guys that have some nice ideas to bypass the signature,its will be great


thanks