File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.CVE-2021-42654Sscms · 1.8% likely

   CWE-434

2. SiteServerCMS 7.1.3 sscms has a file read vulnerability.CVE-2022-44299Sscms · CVSS 4.9 · 0.8% likely

   CWE-22

3. An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.CVE-2025-52237Sscms · CVSS 6.5 · 0.5% likely

   CWE-27

4. An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templa…CVE-2025-45529Sscms · CVSS 7.1 · 0.4% likely

   CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.