Vulnerabilities > Yappa NG > Yappa NG > 1.1

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-1311 Cross-Site Scripting vulnerability in Yappa-NG
Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
yappa-ng
4.3
2005-04-24 CVE-2005-1312 Remote File Include vulnerability in Yappa-NG
PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
network
low complexity
yappa-ng
7.5