Hmm did the person that told you give you a link to an advisory ? do you know if its public yet ? i remember reading something about PM's but i think it was the vbullitin message board system its late here and im about to go to bed but you could check securiteam.com packetstormsecurity.nl or xatrix.org i will check back this thread in the morning and them i will have a decent look to see if i can turn anything up