ilja van sprundel.
I'm not sure how serious this thing is, but an application error should never disclose account data including passwords.
"If you're even thinking of doing any security engineering, you need to read this book" — bruce schneier
exploit database
