Reminds me a recent article that went viral on HN, claiming: "There isn't an easy exploit for this PHP vulnerability"..

https://news.ycombinator.com/item?id=50188948