SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Grandstream UCM6200 - SQL InjectionCVE-2020-5722Grandstream · CVSS 9.8 · 84% likely

   CWE-89

2. Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi?…CVE-2019-10663Grandstream · 28% likely

   CWE-89

3. The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the chall…CVE-2020-5724Grandstream · 12% likely

   CWE-89

4. The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge actio…CVE-2020-5726Grandstream · 4.3% likely

   CWE-89

5. The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login…CVE-2020-5725Grandstream · 1.8% likely

   CWE-89

6. SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to estab…CVE-2015-2866Grandstream · 1.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.