what happened to me might have been different... but you might want to check out this thread
http://www.askdamagex.com/t21776-we-...urity-now.html
there is another one kicking around.. but if I were you ... start with taking the exploit out of your templates... and then chmod'ing them to 444 (read-only)