maybe a sql injection ....and escalate from there..