https://tsecurity.de/de/1003648/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/CMS+Made+Simple+up+to+2.2.6+Password+Reset+Hash+weak+authentication/