SQL Injection

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id].CVE-2013-6839Instantsoft · 1.2% likely

   CWE-89

2. SQL Injection in instantsoft/icms2CVE-2023-4188instantsoft · CVSS 9.8 · 0.9% likely

   CWE-89

3. SQL Injection in instantsoft/icms2CVE-2023-4928instantsoft · CVSS 7.2 · 0.9% likely

   CWE-89

4. SQL injection in index_chart_data actionCVE-2024-31212instantsoft · CVSS 6.7 · 0.9% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.