. The culprit is on page 00. Move your mouse there and it looks like Amazon is owned, you immediately get the picture at the right hand side (div overlay also setting the HTML title).What happened? There is on page 00 basically a listing containing one of RSnake's code snippets:As you can see that piece of code made it into the tool-tip, that's it, bingo! [With a little bit of luck and time it should definitely be possible to find more payloads in web security books, well... until Amazon fixes this. I didn't try very hard though I own WAHH and the German book which makes it easier (