CVE-2006-1021

CVE-2006-1021 describes a cross-site scripting (XSS) vulnerability in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) version 3. The flaw resides in the sol_menu.php script and allows an attacker to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable). ...