Vulnerability with das Blog

Ok, I'm a couple of days late on this one, but since I recommend it to all of my friends, clients, and students, I thought I should post this advisory and patch.