CVE:CVE-2007-4297
CNNVD:CNNVD-200708-170
Dersimiz Haber Ekleme Modulu的yorumkaydet.asp中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1) yazan, (2) mail, 和 (3) yorum参数，注入任意web脚本或HTML。
solution:Upgrade aspindir dersimiz_haber_ekleme_modulu to a higher version than *