[VIM] Inquiry sent to NZ Ecommerce vendor
Steven M. Christey
coley at mitre.org
Wed Mar 8 21:27:36 EST 2006
Regarding the XSS and SQL injection issues in NZ Ecommerce here:
The vendor included a blog comment that said he could not reproduce
I researched things a little bit, and it appears that the report is
legit. I've sent a followup email to the vendor with my findings.
I'll let you know when I hear something.
Hmmmmmm... while I was composing this email, I received some sort of
bounce error from the vendor's site. Guess I'll have to try later...
More information about the VIM