jandjauction.com XSS vulnerability

Vulnerable URL: http://www.jandjauction.com/home.asp?WhichAuctions=1/-///'/"//--...