Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.
</div>
</td>
<td id="mdg-mr"></td>
</tr>
<tr>
<td id="mdg-btl"></td>
<td>
<div id="credits">
{COPYRIGHT}
</div>
</td>
<td id="mdg-btr"></td>
</tr>
<tr>
<td id="mdg-btcl"></td>
<td id="mdg-btm"></td>
<td id="mdg-btcr"></td>
</tr>
</table>
</td>
<td style="width: 10%;"></td>
</tr>
</table>
</body>
</html>