Secunia was able to take over a link on the website of a bank. If you don't want to call it a bug, call it at least a security defect