yeah this is a very very bad vulnerability.
I agree. A LOT of people use this, nearly a standard, and depending on the nature of the vulnerability...