Phpmyfaq

Every one of the 50 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before…CVE-2011-4825Phpmyfaq · 39% likely

   CWE-94

2. Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE…CVE-2005-3048Phpmyfaq · 8.3% likely
3. phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.CVE-2014-6048Phpmyfaq · 5.7% likely

   CWE-200

4. phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.CVE-2014-6047Phpmyfaq · 5.7% likely

   CWE-275

5. Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVE-2010-4821Phpmyfaq · 4.7% likely

   CWE-79

6. phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.CVE-2014-6050Phpmyfaq · 4.6% likely

   CWE-254

7. phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.CVE-2014-6049Phpmyfaq · 3.2% likely

   CWE-285

8. PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive informat…CVE-2005-3049Phpmyfaq · 2.6% likely
9. In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.CVE-2017-15730Phpmyfaq · 2.5% likely

   CWE-352

10. Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an…CVE-2017-14618Phpmyfaq · 2.4% likely

    CWE-79

11. phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.CVE-2004-2257Phpmyfaq · CVSS 5.3 · 2.3% likely

    CWE-425

12. Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configur…CVE-2017-14619Phpmyfaq · 2.2% likely

    CWE-79

13. SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restor…CVE-2014-6045Phpmyfaq · 2.1% likely

    CWE-89

14. Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (lang…CVE-2004-2256Phpmyfaq · 2.0% likely
15. Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used…CVE-2004-2255Phpmyfaq · 2.0% likely
16. Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-0814Phpmyfaq · 2.0% likely

    CWE-79

17. Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1)…CVE-2014-6046Phpmyfaq · 1.9% likely

    CWE-352

18. In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.CVE-2017-15727Phpmyfaq · 1.8% likely

    CWE-79

19. Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via unspecified vectors.CVE-2006-6913Phpmyfaq · 1.5% likely
20. Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema,…CVE-2005-3734Phpmyfaq · 1.5% likely
21. phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in in…CVE-2010-4558Phpmyfaq · 1.4% likely

    CWE-94

22. The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.CVE-2018-16651Phpmyfaq · 1.4% likely

    CWE-1236

23. PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message.CVE-2005-3050Phpmyfaq · 1.4% likely
24. phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrat…CVE-2011-3783Phpmyfaq · 1.2% likely

    CWE-200

25. Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."CVE-2007-1032Phpmyfaq · 1.2% likely
26. Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter…CVE-2009-4780Phpmyfaq · 1.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.