Refbase

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE…CVE-2015-6008Refbase · 4.8% likely

   CWE-78

2. Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via th…CVE-2015-7381Refbase · 3.2% likely

   CWE-94

3. Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL commands via (1) the where parameter t…CVE-2015-6009Refbase · 1.5% likely

   CWE-89

4. SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacter…CVE-2015-7382Refbase · 1.5% likely

   CWE-89

5. Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via (1) the id parameter to unapi.p…CVE-2015-6011Refbase · 1.2% likely
6. Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to redirect users to arbitr…CVE-2015-6012Refbase · 1.2% likely
7. Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-28 allow remote attackers to inject arb…CVE-2015-7383Refbase · 1.2% likely

   CWE-79

8. Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbi…CVE-2015-6010Refbase · 1.2% likely

   CWE-79

9. Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the headerMsg parameter to (1) show.php and (2)…CVE-2008-6400Refbase · 1.0% likely

   CWE-79

10. Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the authentication of arbitrary users.CVE-2015-6007Refbase · 0.7% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.