Interspire ArticleLive 2005 (php version) is vulnerable to XSS

[mircia mircia]

Can you please confirm my suggestion that:

Interspire ArticleLive 2005 (php version) is vulnerable to XSS:

e.g.

http://localhost/articles/newcomment?ArticleId="><script>alert('hi')</script>

// best wishes, mircia [mircia@security.talte.net]

[eddie@interspire.com]

This has been patched.