Shame they totally skipped the whole sub domain takeover bit, which was required for the exploit to work.