Exposing Citation Vulnerabilities in Generative Engines