Cross-Site Request Forgery

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add adminis…CVE-2018-12603Lfdycms · 3.4% likely

   CWE-352

2. A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.CVE-2018-12602Lfdycms · 2.9% likely

   CWE-352

3. Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.CVE-2018-20603Lfdycms · 0.5% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.