Other weaknesses

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allow…CVE-2007-5416Drupal · 4.4% likely

   CWE-189

2. Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related t…CVE-2016-3171Drupal · 3.2% likely

   CWE-19

3. The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run…CVE-2016-3168Drupal · 2.5% likely

   CWE-254

4. The XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might make it easier for remote attackers to conduct brute-force attacks via a large number of calls made at once…CVE-2016-3163Drupal · 1.4% likely

   CWE-254

5. Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035CVE-2026-8492Drupal · CVSS 2.7 · 0.2% likely

   CWE-471

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.