== grep (substr="%" page="/admin/%") ==

== triluliluvideo(user="test" id="m();function show_m() {alert('XSS Still here');};//") ==

== include(page="avatar/full/test.php") ==

== blogcommentcount(topic_id="test""> <script>alert('XSS, again...');</script> <a style="" ") ==

== YoutubeVideo(width="500" height="500" id="../watch?v=UF9GNLzaIwg") ==

== roundtimer(round_id="pressure1/test" units="2") ==

== blogposts() ==
 
== calendar() ==
 
== Gallery(page="preONI/Ziua%" file="%.jpg") ==

== youtubevideo(id="test"" onerror='alert(1)'") ==