SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective…CVE-2018-6893Finecms · 2.5% likely

   CWE-89

2. finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website databaseCVE-2017-12774Finecms Project · 1.5% likely

   CWE-89

3. dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php.CVE-2017-11584Finecms · 1.5% likely

   CWE-89

4. dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.CVE-2017-11582Finecms · 1.5% likely

   CWE-89

5. dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.CVE-2017-11583Finecms · 1.1% likely

   CWE-89

6. SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip parameter.CVE-2017-11200Finecms Project · 1.0% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.