Exploring Vulnerabilities of No-Reference Image Quality Assessment Models: A Query-Based Black-Box Method