this is a exploit been used to attack victim.com, basing on a webcrawler , actually a XSS-Worm.
Functionality:
Group Sending Emails, Deleting Emails,
Match Crucial Information like userpasswd, or working information
Specific to certain website, but easy to modify or expand.
Installation of basic modules such as: