On Saturday 03 November 2007 Kfir Lavi wrote: > Hi, > I have tried to search for a flight at Israir site. Here is a link to the > page: http://www.israir.co.il/cat_flights_europe.asp?type=6 > Now, as you guessed, the search button don't work.
The site suffers from an SQL injection: http://www.israir.co.il/cat_flights_europe.asp?type=6' As often happens with web sites that are so poorly designed they only (barely) work on IE. If you have some free time (and SQL knowledge), you might try and manipulate the SQL injection to pull stuff from the database manually. > > Thanks, > Kfir - Aviram ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
