XSS hacking walkthrough

[ZWarrior]

http://www.informit.com/articles/article.asp?p=603037&rl=1

A very nice walkthrough of hacking through the use of cross site scripting.  The author is a penetration testing consultant, and leads you through a test he performed and how he aquired not only access to the client menu area, but also created an admin account and could have take all the customers data to boot.

Very clever, very well written.