The exploit SWF just puts in that it is an Ajax call: X-Requested-With: XMLHttpRequest which says "I'm an AJAX request". Since the value is static, it is eas

The exploit SWF just puts in that it is an Ajax call: X-Requested-With: XMLHttpRequest which says "I'm an AJAX request". Since the value is static, it is easy to use in an exploit.