<<< Date Index >>>     <<< Thread Index >>>

fotolog xss



example:
http://www.fotolog.com/all_photos.html?user=[code]

http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E

bye