Classcms

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt fi…CVE-2022-25581Classcms · 1.2% likely

   CWE-434

2. here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.CVE-2022-45966Classcms Project · CVSS 9.8 · 0.8% likely

   CWE-434

3. ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, al…CVE-2024-57099Classcms · CVSS 9.8 · 0.7% likely

   CWE-94

4. ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.CVE-2024-48180Classcms · CVSS 9.8 · 0.6% likely

   CWE-434

5. A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload i…CVE-2022-25582Classcms Project · 0.6% likely

   CWE-79

6. ClassCMS User Management Page admin insufficient privilegesCVE-2024-12666Classcms · CVSS 4.7 · 0.5% likely

   CWE-274

7. ClassCMS Model Management Page admin cross site scriptingCVE-2024-12503Classcms · CVSS 2.4 · 0.5% likely

   CWE-79

8. ClassCMS Article admin cross site scriptingCVE-2024-8145Classcms · CVSS 2.4 · 0.4% likely

   CWE-80

9. ClassCMS cross site scriptingCVE-2024-6932Classcms Project · CVSS 3.5 · 0.4% likely

   CWE-79

10. ClassCMS Logo admin cross site scriptingCVE-2024-8144Classcms · CVSS 3.5 · 0.4% likely

    CWE-79

11. ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.CVE-2024-57097Classcms · CVSS 4.8 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.