Textpattern

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.CVE-2018-7474Textpattern · 6.2% likely

   CWE-89

2. Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugi…CVE-2023-36220Textpattern · 3.4% likely

   CWE-22

3. textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution b…CVE-2021-44082Textpattern · 3.0% likely

   CWE-79

4. PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.CVE-2010-3205Textpattern · 2.9% likely

   CWE-94

5. PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in th…CVE-2006-5615Textpattern · 2.6% likely
6. An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.CVE-2023-26852Textpattern · CVSS 7.2 · 2.0% likely

   CWE-434

7. Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to setup/index.php.CVE-2014-4737Textpattern · 1.9% likely

   CWE-79

8. index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter.CVE-2008-5669Textpattern · 1.5% likely

   CWE-20

9. Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web s…CVE-2011-5019Textpattern · 1.5% likely

   CWE-79

10. Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.CVE-2020-19510Textpattern · 1.5% likely

    CWE-434

11. textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting serv…CVE-2018-1000090Textpattern · 1.3% likely

    CWE-611

12. Textpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstr…CVE-2011-3807Textpattern · 1.2% likely

    CWE-200

13. Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a sessio…CVE-2008-5670Textpattern · 1.2% likely

    CWE-255

14. Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to setup…CVE-2008-5668Textpattern · 1.1% likely

    CWE-79

15. An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.CVE-2023-24269Textpattern · CVSS 8.8 · 1.1% likely

    CWE-434

16. A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a craf…CVE-2021-28002Textpattern · 1.1% likely

    CWE-79

17. A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payloa…CVE-2021-28001Textpattern · 1.0% likely

    CWE-79

18. Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or H…CVE-2008-5757Textpattern · 0.9% likely

    CWE-79

19. There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.CVE-2023-50038Textpattern · 0.8% likely

    CWE-434

20. In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.CVE-2015-8033Textpattern · 0.8% likely

    CWE-521

21. In Textpattern 4.5.7, an unprivileged author can change an article's markup setting.CVE-2015-8032Textpattern · 0.8% likely

    CWE-269

22. Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining s…CVE-2021-30209Textpattern · 0.8% likely

    CWE-434

23. Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem.CVE-2020-29458Textpattern · 0.7% likely

    CWE-352

24. Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.CVE-2021-40658Textpattern · 0.6% likely

    CWE-79

25. Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.CVE-2020-35854Textpattern · 0.6% likely

    CWE-79

26. Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplib_misc.php. The secure flag is…CVE-2021-40642Textpattern · 0.5% likely

    CWE-311

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.