File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/admin_vod.php?action=add.CVE-2018-8766Joyplus-Cms Project · 3.3% likely

   CWE-434

2. joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.CVE-2019-17175Joyplus-Cms Project · 1.7% likely

   CWE-22

3. manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise al…CVE-2018-14334Joyplus-Cms Project · 1.7% likely

   CWE-434

4. A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.CVE-2020-22124Joyplus-Cms Project · 1.0% likely

   CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.