The result was that a carefully constructed URL could automatically load arbitrary code, including a database reset script!

• 翻译:结果是，精心构造的URL，可以自动地调用任意的代码，包括数据库的清空脚本。