Re: XSS with Vbulletin (new idea !)

[micmast]

This has been discovered before, that is why Macromedia object tags have the 
allowscript option.