thumbnail Code injection attacks using publicly disclosed ASP.NET machine keys