https://www.cyberkendra.com/2014/07/vbulletin-fixed-critical-sql-injection.html