kevin has been asked to write a short program to gather user

What attack will his program expose the web application to?