HLstats v1.35 - Cross-Site Scripting Vulnerability #3
discovered by John Martinelli of RedLevel Security
Google d0rk: "generated in real-time by HLstats"
file hlstats.php - variable authusername - method post
file hlstats.php - variable authpassword - method post