Visual Basic 6 : XSS due to insufficient validation