File and Path Handling

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times…CVE-2019-13915B3log · 2.6% likely

   CWE-59

2. b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.CVE-2018-10469B3log · 2.1% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.