File and Path Handling

Every one of the 35 is a mark on the map. Named now: 27 to 35, most at risk first.

27. itsourcecode Online Hotel Management System controller.php add unrestricted uploadCVE-2026-13553itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-434

28. itsourcecode Online Tour and Travel Management System travellers.php unrestricted uploadCVE-2025-9153itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-434

29. itsourcecode E-Commerce Website users.php unrestricted uploadCVE-2025-10616itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-434

30. itsourcecode Content Management System add_topic.php unrestricted uploadCVE-2025-4310itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-434

31. itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted uploadCVE-2026-85186itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-434

32. itsourcecode E-Commerce Website products.php unrestricted uploadCVE-2025-10615itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-434

33. itsourcecode Open Source Job Portal controller.php unrestricted uploadCVE-2025-11078itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-434

34. itsourcecode Online Voting System index.php unrestricted uploadCVE-2025-13061itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-434

35. itsourcecode Free Hotel Reservation System index.php unrestricted uploadCVE-2026-4875itsourcecode · CVSS 4.7 · 0.2% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.