Hey Panz, I was looking at the original issue for this security flaw and was wondering where you were with it on this side...

I was able to track down why the issue exists in the first place, however I have yet to find out what's going on in the back end that permits this to happen...

Take a look and let me know how I can help move forward with this...
http://drupal.org/node/1055424#comment-4516220