Codoforum

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Codoforum 5.1 - Arbitrary File UploadCVE-2022-31854Codologic · 32% likely

   CWE-434

2. The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. (d…CVE-2014-9261Codologic · 9.0% likely

   CWE-22

3. A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a…CVE-2020-13873Codologic · 4.9% likely

   CWE-89

4. Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.ph…CVE-2020-5842Codologic · 1.8% likely

   CWE-79

5. Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.CVE-2020-5306Codologic · 1.1% likely

   CWE-79

6. An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file.CVE-2020-22539Codologic · CVSS 7.2 · 0.9% likely

   CWE-434

7. Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impac…CVE-2020-7051Codologic · 0.8% likely

   CWE-79

8. Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen.CVE-2020-5305Codologic · 0.6% likely

   CWE-79

9. Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.CVE-2020-5843Codologic · 0.5% likely

   CWE-79

10. Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once th…CVE-2020-7050Codologic · 0.5% likely

    CWE-79

11. Codoforum 4.8.8 allows self-XSS via the title of a new topic.CVE-2020-9007Codologic · 0.5% likely

    CWE-79

12. A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted…CVE-2020-25875Codologic · 0.5% likely

    CWE-79

13. A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a c…CVE-2020-25879Codologic · 0.5% likely

    CWE-79

14. A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted pa…CVE-2020-25876Codologic · 0.5% likely

    CWE-79

15. Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name…CVE-2020-22540Codologic · CVSS 5.4 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.