MySQL Design Flaw Allows Malicious Servers to Steal Files from Clients