Unfixed XSS vulnerability at cgi.wn.com

Security researcher zuppergazi, has submitted on 22/04/2007 a cross-site-scripting (XSS) vulnerability affecting cgi.wn.com, which at the time of submission ranked 8400 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 23/04/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://cgi.wn.com/?SearchString="&gt;&lt;script&gt;alert("zupper")</script>&language=Turkish&template=nbl2%2Fadv_search.txt&action=search&first=0