[twintone]

Saw this posted on another board, thought I would pass it along.


Well, after a spotless clean record of 4 years, but with a gigazillion users, it was bound to happen, the very first security related bug came up
Close your signup pages to protect yourself, a patch will be ready in a couple of hours.

Also, check the ST copies on your servers.
One of the versions downloads a file ns.txt and and copies + renames it to
/st/classes/image_class.php