Originally Posted by Sly

Custom scripts often have security issues. Sometimes from laziness, sometimes because the coder simply didn't know better. Odds are your script is also on the older side, meaning no updates in years, making matters even worse.

If you care about your site, spend the money to get it patched up. Otherwise there is not much that can be done.