Codiad

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.CVE-2018-14009Codiad · 38% likely

   CWE-20

2. Codiad Web IDE through 2.8.4 allows PHP Code injection.CVE-2019-19208Codiad · 19% likely

   CWE-94

3. Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.CVE-2018-19423Codiad · 18% likely

   CWE-434

4. components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demons…CVE-2017-11366Codiad · 7.5% likely

   CWE-78

5. Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.…CVE-2014-9581Codiad · 3.6% likely

   CWE-22

6. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugi…CVE-2020-14044Codiad · 3.2% likely

   CWE-918

7. Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field.CVE-2013-7257Codiad · 1.9% likely

   CWE-79

8. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketp…CVE-2020-14043Codiad · 1.5% likely

   CWE-352

9. Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the short_name par…CVE-2014-9582Codiad · 1.5% likely

   CWE-79

10. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitizatio…CVE-2020-14042Codiad · 1.2% likely

    CWE-79

11. ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value…CVE-2020-23355Codiad · 1.0% likely
12. Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.CVE-2017-1000125Codiad · 0.9% likely

    CWE-732

13. Codiad process.php saveJSON information disclosureCVE-2017-20178Codiad · CVSS 3.1 · 0.7% likely

    CWE-200

14. Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.CVE-2024-26557Codiad · CVSS 5.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.