CVE-2006-1021 - Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable)

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable)

Published Mar 7, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.75%

Description

Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/19055
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.securityfocus.com/archive/1/426363/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16885
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0781
vdb-entryx_refsource_VUPEN
http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1025
Advisory

Link	Providers	Tags
http://secunia.com/advisories/19055		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.securityfocus.com/archive/1/426363/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16885		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0781		vdb-entryx_refsource_VUPEN
http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1025		Advisory