CVEvulnerability
CVE-2007-5179
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the (1) ad, (2) sehir, (3) yas, (4) cins, (5) tel, (6) mail, and (7) mesaj parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• y\&k iletisim formu y\&k iletisim formu
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/27034 Vendor Advisory
- http://www.securityfocus.com/bid/25874 www.securityfocus.com
- http://secunia.com/advisories/27034 Vendor Advisory
- http://www.securityfocus.com/bid/25874 www.securityfocus.com