https://www.junookyo.com/2012/09/mybb-0day-mytabs-plugin-sql-injection.html