SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php.CVE-2013-4879Bigtreecms · 2.3% likely

   CWE-89

2. SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\for…CVE-2017-9427Bigtreecms · 1.6% likely

   CWE-89

3. A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to inject a malicious SQL query to…CVE-2020-26668Bigtreecms · 1.4% likely

   CWE-89

4. A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user use…CVE-2017-16961Bigtreecms · 1.4% likely

   CWE-89

5. BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables object in manifest.json in an uploaded package. This issue exist…CVE-2017-9443Bigtreecms · CVSS 8.8 · 1.3% likely

   CWE-89

6. SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core/admin/modules/developer/modules/views/create…CVE-2017-9449Bigtreecms · 1.1% likely

   CWE-89

7. SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array p…CVE-2017-11736Bigtreecms · 1.0% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.