var db = <users>
          <user>
            <name>peter</name>
            <surname>parker</surname>
          </user>
          <user>
            <name>clark</name>
            <surname>kent</surname>
          </user>
        </users>;

for each(var user in db.*) {
   alert(user.name + ' ' + user.surname);
}