Re: http://pridels.blogspot.com/2005/11/orca-blog-sql-inj-vuln.html Vendor ACKed issue on r0t's web site, blog, but ack is also at http://www.greywyvern.com/orca#blog "Changelog: 1.3b to 1.3c Patch for Secunia advisory #17804 - MySQL Injection" - Steve