Prerequisites for experience this vulnerability are not really on the tough side, i.e. it works with a usual browser. I was successful with Chrome 0/0 and Firefox 0.0 (both under Linux) as well as IE 0 (Win 0/Vista):