Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate