Insecure Direct Object Reference

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.CVE-2019-13360Control-Webpanel · 24% likely

   CWE-639

2. In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid us…CVE-2019-13605Control-Webpanel · 15% likely

   CWE-639

3. In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an…CVE-2019-14724Control-Webpanel · 4.4% likely

   CWE-639

4. In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.CVE-2019-14721Control-Webpanel · 1.8% likely

   CWE-639

5. In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker a…CVE-2019-14725Control-Webpanel · 1.5% likely

   CWE-639

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.