dude....they didn't do a thing about the JCF. They're using vBulletin ( http://www.vbulletin.com ).
That's a group of people who are writing these bulletin boards, and sell them to others.
And in this new version of vBulletin there are some security-bugs fixed.