The truth about the vBulletin forums MySQL security flaw

Many of the biggest forum-based online communities, including DaniWeb, are powered by vBulletin software. So it came as something of a shock when the BBC reported that a vBulletin security flaw means that any hacker could "easily access the main administrator username and password for a site". But is the security flaw really both that simple and that serious?