[IMG]javascript:alert(document.cookie).gif[/IMG], Photo/javascript:alert(document.cookie) URL, Photo, X-Forwarded-For scripting.
vulners.com/securityvulns/securityvulns:doc:3586
vulners.com/securityvulns/securityvulns:doc:3843