File and Path Handling

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5,…CVE-2011-2933WebsiteBaker · 1.1% likely

   CWE-434

2. WebsiteBaker 2.13.3 Directory Traversal via Media Delete EndpointCVE-2023-53902websitebaker · CVSS 6.5 · 1.0% likely

   CWE-22

3. WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)CVE-2021-47788Websitebaker · CVSS 8.8 · 1.0% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.