[no response] fail to adequately sanitize request strings

[wilt]

and just to reiterate , even their test output shows no vulnerability

e.g.

<input type="text" name="contactname" value="echo NeS SuS" size=" [...]

the test string is contained within the value attribute as it should be.

[anax]

Thank you for your prompt reply. I posted because I couldn't tell what the vulnerability was either. I shall post back here if more detail is provided to me.