<IMG SRC=javascript:alert('XSS')>
info at phpclasses dot org