← Back

Angelo Emlak

angelo-emlak

Vendor: Aspindir • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4820
1Aspindir
1Angelo Emlak
Apr 29, 2026
Apr 27, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb.
CVE-2008-2048
1Aspindir
1Angelo Emlak
Apr 23, 2026
May 1, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter.
CVE-2008-2047
1Aspindir
1Angelo Emlak
Apr 23, 2026
May 1, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/profil.asp and (2) hpz/prodetail.asp.