I have one sponsor with this exploit on their sites. I notified them and included info about Gumblar. They replied, thanked me for the info, said they were working on it with their host. That was almost two weeks ago and the exploit persists on their site. Too bad they're not hosted with Mojo.