File and Path Handling

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot…CVE-2009-4974Sweetphp · 2.3% likely

   CWE-22

2. Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include par…CVE-2009-1406Sweetphp · 1.9% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.