SQL Injection

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their ow…CVE-2019-19734Mfscripts · 1.1% likely

   CWE-89

2. translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter in…CVE-2019-19732Mfscripts · 1.1% likely

   CWE-89

3. payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allow…CVE-2019-20059Mfscripts · 0.9% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.