Sometimes software is just simply Insecure. Which is a lot worse in proprietary software where users can't check the software for Insecurities.
This comment thread is for people to document various implementations of this malicious feature.
JSON
Markdown