A API vulnerability documented by independent security blogger "bobdahacker" created a path to replacing the FIFA World Cup ...