Duplicate of:
What common web exploits should I know about?
This is a security question.
What should I
Javascript can be executed against the current page just by putting it in the URL address, e.g.
javascript:;alert(window.document.body.innerHTML); javascript:;alert(window.document.body.childNodes[0].innerHTML);