Javascript Injection

[iago]

I found a way to inject javascript into our software that I can't really resolve.  I need to demonstrate to somebody what the security consequences are.  

Can somebody remind me how to use it to grab a cookie from a user?  Thanks

[Banana fanna fo fanna]

document.cookie?

[iago]

document.cookie?

That's all I needed to know; stupid javascript