Story

Drupal is pretty darned dominant though, in the web content world, anyway. I know Wordpress is probably the biggest one out there but Drupal is probably second I'd think, or not far away from the top, anyway. But on /. and elsewhere, wherever a Drupal thread comes up there's an instant reaction from people who have programmed for it, and they complain it's a hairball of spaghetti code. Maybe this was a train wreck in the making and anybody who knew the code knew sooner or later it would happen.

Still, how would you like to be the person responsible for writing a security announcement that goes, "unless you've patched recently, you have probably already been compromised?" That's got to be pretty uncomfortable.