Penetration Testing: Level of Exploitation

[pentestr <pentestr () gmail com>]

Hi list,

I have come across a situation where I need to specify the "Level of 
Exploitation" to the client ( a govt. agency). I was able to do SQL 
Injection, Cross Site Scripting attacks against the web application.  
Could you share your ideas about level of exploitation. What level we 
can give for SQL Injection, Cross site scripting, buffer overflow, TCP 
stack exploit,etc
thanks in advance
Pen Testr



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------