The SQLi versions of this (for those who like to cosplay as little Bobby Tables) are well worn, but I don't see nearly as many XSS versions and that's a shame.
It's hard to believe that they weren't trying to make a working exploit. It's not like it's an easy name for potential customers to deal with, it certainly wasn't going to bring in business.