PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
http://www.vupen.com/english/advisories/2006/5189
http://www.securityfocus.com/archive/1/455259/100/0/threaded