Inject a malicious IFrame into an FTP document