Posted by Steven Musumeche on 08/07/06 17:04

stirrell@integrastrategic.com wrote:
> Hello Miguel,
>
> You're right - I probably am checking more than I need to but I figured
> it didn't hurt to check those inputs and I was trying to make sure I
> wasn't missing anything. Here is a copy of the message from the
> bounceback that I got from the server. To me, it looks like a
> successful injection attempt.

You should also check the message for BCC, CC, etc. I had a problem in
which the injection attack was being successfully done in the message
body part of my contact form.

-Steven

[Back to original message]