Command and Code Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. PhpMyAdmin Scripts - Remote Code ExecutionCVE-2009-1151phpMyAdmin · CVSS 9.8 · 97% likely

   CWE-94

2. phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, whic…CVE-2016-5734Phpmyadmin · 81% likely

   CWE-94

3. phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_…CVE-2012-5159Phpmyadmin · 75% likely

   CWE-94

4. libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters re…CVE-2011-2505Phpmyadmin · 13% likely

   CWE-94

5. Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PH…CVE-2009-1285Phpmyadmin · 11% likely

   CWE-94

6. setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows…CVE-2011-2506Phpmyadmin · 9.6% likely

   CWE-94

7. phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double exten…CVE-2013-3239Phpmyadmin · 8.8% likely

   CWE-94

8. An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdmin is being run as a CGI application. Under certain server c…CVE-2016-6631Phpmyadmin · 4.8% likely

   CWE-78

9. libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, whic…CVE-2011-2507Phpmyadmin · 3.0% likely

   CWE-94

10. An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to…CVE-2016-6609Phpmyadmin · 2.3% likely

    CWE-77

11. An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions (prior to 4.6.5) are affected.CVE-2016-9862Phpmyadmin · 1.6% likely

    CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.