Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2010-04-27	CVE-2009-4820	Permissions, Privileges, and Access Controls vulnerability in Aspindir Angelo-Emlak 1.0 Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb. network low complexity aspindir CWE-264	5.0
2008-05-01	CVE-2008-2048	Cross-Site Scripting vulnerability in Aspindir Angelo-Emlak 1.0 Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter. network aspindir CWE-79	4.3