I wouldn't do any further penetration "testing" on the website you are talking about above. If you wanted to be polite, you could email the admin. That being

I wouldn't do any further penetration "testing" on the website you are talking about above. If you wanted to be polite, you could email the admin. That being said, there's always a chance they could press charges against you for cyber crimes even though your intentions are to help them fix their site.