Bcoos

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in…CVE-2008-2350Bcoos · 2.7% likely

   CWE-22

2. Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsOption[…CVE-2007-6079Bcoos · 1.9% likely

   CWE-22

3. SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute a…CVE-2008-6381Bcoos · 1.6% likely

   CWE-89

4. SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter. NO…CVE-2007-6080Bcoos · 1.2% likely

   CWE-89

5. Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to modules/arcade/index.php i…CVE-2007-6266Bcoos · 1.1% likely

   CWE-89

6. Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web sc…CVE-2007-6274Bcoos · 1.1% likely

   CWE-79

7. SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action…CVE-2007-5104Bcoos · 1.1% likely

   CWE-89

8. SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter, a differe…CVE-2007-6275Bcoos · 0.9% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.