I wouldn't do any further penetration "testing" on the website you are talking about above. If you wanted to be polite, you could email the admin.

That being said, there's always a chance they could press charges against you for cyber crimes even though your intentions are to help them fix their site.