Rules: Inject alert command.
Rules: Steal the cookies from this page by sending them to your website
Rules: test in admin.php