Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20430
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1486
http://www.securityfocus.com/bid/13493
http://securitytracker.com/id?1013895