Flatcore

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature.CVE-2019-10652Flatcore · 7.0% likely

   CWE-434

2. flatCore before 1.5.7 allows upload and execution of a .php file by an admin.CVE-2020-17452Flatcore · 2.4% likely

   CWE-434

3. A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php.CVE-2019-13961Flatcore · 2.3% likely

   CWE-352

4. An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP request body parameter for the acp interface…CVE-2021-23835Flatcore · 1.7% likely

   CWE-20

5. An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interfac…CVE-2021-23837Flatcore · 1.5% likely

   CWE-89

6. An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request body parameter for the acp interface. The…CVE-2021-23838Flatcore · 1.0% likely

   CWE-79

7. An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An a…CVE-2021-23836Flatcore · 0.9% likely

   CWE-79

8. Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATH_INFO in an acp.php URL, due t…CVE-2017-9451Flatcore · 0.7% likely

   CWE-79

9. flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/a…CVE-2020-17451Flatcore · 0.6% likely

   CWE-79

10. Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form.CVE-2021-40555Flatcore · CVSS 5.4 · 0.4% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.