https://www.systemtek.co.uk/2019/03/php-vcwd_rename-information-disclosure-vulnerability-cve-2019-9637/