SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_…CVE-2019-9053Cmsmadesimple · 69% likely

   CWE-89

2. CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inje…CVE-2021-40961Cmsmadesimple · 1.8% likely

   CWE-89

3. SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_arti…CVE-2021-28999Cmsmadesimple · CVSS 8.8 · 1.3% likely

   CWE-89

4. SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templa…CVE-2007-6656Cmsmadesimple · 1.2% likely

   CWE-89

5. In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow…CVE-2019-9693Cmsmadesimple · 1.2% likely

   CWE-89

6. SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary S…CVE-2014-2245Cmsmadesimple · 1.0% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.