Bosdates

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.CVE-2004-0275Bosdev · 2.6% likely
2. PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter.CVE-2006-3957Bosdev · 2.5% likely
3. Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category param…CVE-2005-3911Bosdev · 1.2% likely
4. Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in calendar.php and (2)…CVE-2008-1211Bosdev · 1.0% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.