VYPR

Relative Real Estate Systems

by Vclcomponents

CVEs (2)

  • CVE-2008-3185Jul 15, 2008
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.

  • CVE-2008-2881Jun 26, 2008
    risk 0.03cvss epss 0.04

    Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.