Correct me if I'm wrong (which I know the list members will take me up on that), the FD mailing list is about *discussing* vulnerabilities and revealing important information to the community. This post seems to comment on general problems with general products--so general in fact that the products or specific problems are not addressed. If you cannot or will not (for privacy issues) share any details about your findings, I believe that the posted findings are quite useless to the community. I mean this in a constructive sense.
However, if some of the other community members feel that this post is informative in some way, I will gladly hear their reasoning. -Michael On Sat, 20 Nov 2004 20:11:40 -0000 (GMT), gp <[EMAIL PROTECTED]> wrote: > hello list > > Sometimes ago I have examined the websites of many > Government's if it's possible to put malicious code > in their URLs. In November 2004 I inform some > Deparments about my successful work. > > On most Sites it is possible to: > - inject SQL > - account hijacking > - user exploitation > - server manipulation > - read complete dir > ect. ect. > > In Arrangement with the Victims I will not reveal > vulnerability or victim details until a fix became > published. I will answer no questions! > This is only for Your information! > > Credits: > d.w., ms, [...] > > -- > [EMAIL PROTECTED] online <-> MM > ---------- > .//sometimes its better to know somewhat as all but at later times would > be better to know nothing > > ----------------------------------------- > This email was sent using FREE Catholic Online Webmail! > http://webmail.catholic.org/ > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
