File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Weaver OA 9.5 - Information DisclosureCVE-2023-2766Weaver · CVSS 5.3 · 54% likely

   CWE-552

2. Weaver E-Office 9.5 - Remote Code ExecutionCVE-2023-2648Weaver · CVSS 6.3 · 28% likely

   CWE-434

3. Weaver E-Office unrestricted uploadCVE-2023-2523Weaver · CVSS 7.3 · 33% likely

   CWE-434

4. Weaver OA downfile.php absolute path traversalCVE-2023-2765Weaver · CVSS 4.3 · 2.2% likely

   CWE-36

5. E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently deny service.CVE-2024-48071Weaver · CVSS 6.5 · 0.9% likely

   CWE-22

6. An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.CVE-2023-34798Weaver · 0.8% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.