Vulnerabilities > Vclcomponents

DATE CVE VULNERABILITY TITLE RISK
2009-03-24 CVE-2008-6515 Cross-Site Scripting vulnerability in Vclcomponents Yappa-Ng
Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
4.3
2008-07-15 CVE-2008-3185 SQL Injection vulnerability in Vclcomponents Relative Real Estate Systems
SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.
6.8