Basercms

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by lever…CVE-2012-1248Basercms · 2.7% likely

   CWE-264

2. In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.CVE-2018-18942Basercms · 2.4% likely

   CWE-434

3. SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2015-5641Basercms · 1.6% likely

   CWE-89

4. baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.CVE-2015-5640Basercms · 1.6% likely

   CWE-264

5. Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2011-2673Basercms · 1.5% likely

   CWE-79

6. baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.CVE-2017-10844Basercms · 1.5% likely

   CWE-94

7. BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified ve…CVE-2011-2674Basercms · 1.3% likely

   CWE-264

8. baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.CVE-2015-7769Basercms · 1.1% likely

   CWE-78

9. An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][nam…CVE-2018-18943Basercms · 0.7% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.