Blogphp

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.CVE-2008-6745Blogphp · 5.9% likely

   CWE-20

2. Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendm…CVE-2008-6631Blogphp · 1.7% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.CVE-2008-0679Blogphp · 1.5% likely

   CWE-79

4. BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.CVE-2008-2524Blogphp · 1.3% likely

   CWE-287

5. SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.CVE-2008-0678Blogphp · 0.9% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.