http://www.stepsandtips.com/sat/<script>alert(document.cookie)</script> Well I am wondering if there is any hacker who can exploit it. My site has no login and all. I was just doing some penetration testing there and found this. I want to find more holes, if there is any script you have made, please show it to me, so that I can test it.