SQL Injection

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a sele…CVE-2018-12039Joyplus-Cms Project · 4.6% likely

   CWE-89

2. joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.CVE-2018-14389Joyplus-Cms Project · 1.5% likely

   CWE-89

3. SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad() function.CVE-2020-20636Joyplus-Cms Project · CVSS 7.5 · 0.7% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.