SQL Injection

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to user…CVE-2015-2564Projectsend · 3.1% likely

   CWE-89

2. ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with t…CVE-2016-10731Projectsend · 1.4% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.