[chr13]

Indeed, I've quoted that article. But it doesn't talk about random parameters which makes it so easy to attack any website not just your own where you know what the urls are.

[nbody]

Nothing mind blowing, same vulnerability really, there are many ways to extend the core issue.