Firebug console HTML injection
This proof of concept exploit requires that Javascript is enabled.
Cheers,
Thor Larholm