Dang. That is wild, it seems like such a blatantly simple exploit, makes sense then.