Unfixed XSS vulnerability at tickets.amtrak.com

Security researcher holisticinfosec, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting tickets.amtrak.com, which at the time of submission ranked 8533 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It i...