>This is absolutely exploitable...

OK, can you share a working one so we can test that our servers are fixed?