One Malicious Web Request Can Turn an Exposed SharePoint Server Into a Persistent Backdoor