Re: Re: HTTP Response Splitting and SQL injection in megabbs forum

[DanB UK <danbuk () gmail com>]

It seems like the OP was actually just trying to advertise their(or
affiliates) product.
I would say that its not the 'done' thing.
> However in the future, would it be too much to ask that I am contacted
> first?  I am very eager to fix any security vulnerabilities, but sipping
> coffee on a lazy Sunday afternoon and seeing this broadcast to a public
> list is a little disconcerting.
I understand your concern.

Regards,
Daniel
-- 
DanB UK
London, UK

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html