SQL Injection

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT statement, but does not block the "into/**/outfile" manipulat…CVE-2019-17370Otcms · 2.1% likely

   CWE-89

2. OTCMS ind_backstage.php sql injectionCVE-2023-6772Otcms · CVSS 4.7 · 0.6% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.