X2engine

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted…CVE-2014-5298X2engine · 3.0% likely

   CWE-264

2. The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conduct PHP object injection and Server-Side…CVE-2014-5297X2engine · 2.7% likely

   CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.