I certainly agree with the principle here. However, have you ever contacted the admin? Let's just say there's a reputation of delayed responsivenessThe Annoyed Man wrote:It is disgusting to me that these vandals act as if they are performing a public service. If they were truly white-hats, they would contact the site owner and say, "We have discovered the following vulnerabilities in your CMS. If you would like consultation, we are security experts, and we are available for a fee. Phone 800-555-1234."

(Yeah, I've run major forum systems before. There's a reason I don't volunteer to do it again)