If the details in the post are correct, a tool like driftnet[0] should make abusing this pretty easy. Go forth and do bad things

[0] http://www.ex-parrot.com/~chris/driftnet/