https://www.securitynewspaper.com/2017/12/18/ssd-advisory-vbulletin-routestring-unauthenticated-remote-code-execution/