Yeah, unfortunately many public scripts made available are usually full of flaws. In any case, it might be an underground script modified to be insecure. Anyways, PM me if you would need me to help you secure it.
yeah you are right.Most of the free scripts available in net are full of bugs.It better to customize the script before using it in your site.