Let's say... this post is an answer to all Your questions in all e-mails about:
"why I don't release any PMA/*cms*/etc... 0days?".
So answer is:
because all technical information I sent to Vendor.
I don want to release any of those codes because:
1. A lot of admins on the world, do not upgrade their PMA "for years" (;)).
So "no skid help" here. Even if Vendor release patched version. :*
2. I use this codes to pentest Your server's :P ... after we "sign a papers" to do it ;)
Full (and only) legal ideas, please. Really ;)
More questions? Feel free to ask @ mail / comments.