Security News > 2015 > August > MyBB 0day write-up with PoC - abusing inner workings with CORS code. (Reddit)