The password and the username where in the executable. This is no where near a bug but a design choice, a very poor one. Any one with some knowledge could have simply found it.

To add insult to injury that account had all right so they could do whatever they wanted to.

Yes the bug thing is a lie, its like blaming the door when there is broken into your home when you gave the entire village a key an directions to where you live.