this is a exploit been used to attack victim.com, basing on a webcrawler , actually a XSS-Worm.

Functionality:

Group Sending Emails, Deleting Emails,

Match Crucial Information like userpasswd, or working information

Specific to certain website, but easy to modify or expand.