Add this bit of info to a cross site scripting attack on a vunerable server and you're off un running.