probably <a href="http://en.wikipedia.org/wiki/Cross-site_scripting">cross site scripting</a> (not sure, am not a security anything), or your database getting compromised. Using Linux does not prevent you from vulnerabilities affecting web technoclogies