Sweetrice

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter…CVE-2009-4224Basic-Cms · 2.6% likely

   CWE-20

2. Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the…CVE-2009-4231Basic-Cms · 2.3% likely

   CWE-22

3. The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail…CVE-2010-5318Basic-Cms · 1.8% likely

   CWE-255

4. SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrat…CVE-2011-3804Basic-Cms · 1.2% likely

   CWE-200

5. Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an…CVE-2010-5317Basic-Cms · 1.2% likely

   CWE-89

6. Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.CVE-2010-5316Basic-Cms · 1.0% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.