Inject a malicious iFrame into pages through FTP