Runcms

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.CVE-2007-2539Runcms · 7.9% likely
2. Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) foot…CVE-2007-6548Runcms · 7.8% likely

   CWE-94

3. SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executed_queries array para…CVE-2007-2538Runcms · 4.8% likely
4. Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to (1) brokenfile.php, (2) visit.php,…CVE-2007-6544Runcms · 4.3% likely

   CWE-89

5. Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/n…CVE-2007-6545Runcms · 4.1% likely

   CWE-79

6. Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via…CVE-2006-0659Runcms · 4.1% likely

   CWE-94

7. Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) foru…CVE-2006-1793Runcms · 3.6% likely
8. Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter.CVE-2006-0875Runcms · 2.9% likely
9. RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.CVE-2007-6546Runcms · 2.7% likely
10. Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the…CVE-2006-4667Runcms · 2.6% likely
11. RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent attackers to change passwords upon obtaining temporary acce…CVE-2007-6547Runcms · 2.4% likely
12. includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables…CVE-2005-2691Runcms · 2.3% likely
13. SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip para…CVE-2008-0224Runcms · 2.0% likely

    CWE-89

14. Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.CVE-2006-1216Runcms · 2.0% likely
15. SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter.CVE-2006-0721Runcms · 1.7% likely
16. Unspecified vulnerability in newbb_plus in RunCms 1.5.2 has unknown impact and attack vectors.CVE-2007-5535Runcms · 1.5% likely
17. Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankF…CVE-2008-7222Runcms · 1.4% likely

    CWE-79

18. Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the n…CVE-2005-2692Runcms · 1.2% likely
19. RunCMS 2M1, when running with certain error_reporting levels, allows remote attackers to obtain sensitive information via (1) the op[] parameter to modules/contact/index.php or (2…CVE-2009-3815Runcms · 1.1% likely

    CWE-200

20. Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related to "pagetype using."CVE-2007-6549Runcms · 1.1% likely
21. Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to in…CVE-2010-2852Runcms · 1.1% likely

    CWE-79

22. Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/Banning" feature, as demonstrated by mod…CVE-2009-3814Runcms · 1.1% likely

    CWE-94

23. SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2008-1551Runcms · 1.0% likely

    CWE-89

24. SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action.CVE-2008-1462Runcms · 0.9% likely

    CWE-89

25. Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the (1) forum parameter to modules/forum/post.php and p…CVE-2009-3813Runcms · 0.9% likely

    CWE-89

26. Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which…CVE-2009-3804Runcms · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.