fotolog xss

[absamu@gmail.com]

example:
http://www.fotolog.com/all_photos.html?user=[code]

http://www.fotolog.com/all_photos.html?user=%3Ch1%3EXSS%3C/h1%3E

bye