SQL Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_na…CVE-2021-28242B2evolution · 5.0% likely

   CWE-89

2. SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] par…CVE-2013-2945B2evolution · 2.8% likely

   CWE-89

3. b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnerability allows attackers to exe…CVE-2021-31632B2evolution · 1.9% likely

   CWE-89

4. SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter.CVE-2012-5910B2evolution · 1.1% likely

   CWE-89

5. Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2009-1657B2evolution · 1.1% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.