there's a couple tools out there to test if a site is vulnerable.