File and Path Handling

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.CVE-2019-8293Abcprintf · 2.6% likely

   CWE-434

2. Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.CVE-2019-8291abcprintf · 1.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.