There is a flaw in the Mixcloud Player on Carl Cox website that allow a user to change the Mixcloud url to his/her own. The Player is hosted on www.carlcox.com and can play any Mixcloud file. Also there is probable xss vuln but i didn't test it.
In the example i use Carl Cox Mixcloud Player to play a Angerfist set.
Download
[Hidden Content]
Virustotal
[Hidden Content]