http://testaspnet.vulnweb.com/Comments.aspx , tbComment
URL encoded POST input tbComment was set to 555<ScRiPt >kCMl(9005)</ScRiPt>