Comment by rahkiin

Might this be because to be actually vulnerable a company needs to have the ticketing-like system in a sort-of unsafe setup?