<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1555" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>There was an attempt again today to hijack the
admin account using altered cookies. This attempt was unsuccessful. We know who
made the attempt and suspect it to be the same person as last time. This time
the method was recorded. If the same method was used, apparently the current
patch we are using on the site is successful at preventing this. There will
be a new version out soon.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Guys, It's not very helpful to read about how
people have found exploits and not be told what they are. We're trying our best
at web-app.org to catch up with long neglected security issues. Any information
you might have would be helpful.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Were you saying you found some
exploits?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Jos Brown</FONT></DIV>
<DIV><FONT face=Arial size=2>web-app.org</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>