I don't like vanilla but like with any piece of software exposed in the
net to a wide audience keeping it updated is not an option.
Probably the apc.aio forum got an attack using this vulnerability:
-
http://tinyurl.com/cvr3752
As you can see above that was a known issue and a patch was released
time ago.
However, switching off could be considered suspicious since it's
happened immediately after Royal Panda, I and others have clearly
pointed out our complaints against the apc/WonderMedia/Via policy.
Just after the forum cleanup from spam the thread started from Royal
Panda was also deleted so I restarted another one on the very same
subject and feeling... a minute later the apc forum was offline.