[TYPO3] Picture 'click to enlarge' hacked

[Jens Sambale]

Christoph Koehler schrieb:
> On Tue, 26 Sep 2006 07:25:00 -0500, Rik den Braber <dbisnl at gmail.com>
> wrote:
> 
>> Hi,
>>
>> On one site I work on for a friend the 'click to enlarge' picture option
>> doesn't make the picture open in a new window, but instead takes the
>> visitor
>> to a page on wikipedia (http://en.wikipedia.org/wiki/Script_kiddie). I
>> did
>> not change anything  to make this behavior happen, so does anyone know
>> how
>> or where this is caused and how to solve it?
>> I use typo3 3.8.1.
>>
>> I hope anyone has a solution.....
>>
>> TIA
>>
>> Rik <typo3-english at lists.netfielders.de>
> 
> If I remember right there was such a vulnerability in that version.
> Upgrade to 4.0.2.

please!
is there more information on this?
I maintain a couple of 3.8.0 and 3.8.1 sites and would hate to upgrade
all of them