Hi SF, Possible duplicate in BID 15821 (Guestserver HTML injection reported by jaakko at ritke.fi) with BID 12232 [OSVDB 12846] (Guestserver HTML injection reported by SmOk3). Stuart