File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. CMSimple 3.1 - Local File InclusionCVE-2008-2650Cmsimple · 19% likely

   CWE-22

2. CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.CVE-2021-43741Cmsimple · 4.7% likely

   CWE-22

3. CMSimple 5.4 Authenticated Local File Inclusion Remote Code ExecutionCVE-2021-47734Cmsimple · CVSS 7.8 · 0.8% likely

   CWE-98

4. CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.CVE-2024-57549Cmsimple · CVSS 7.5 · 0.7% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.