Millions of vehicles could be hacked thanks to a simple website bug