SQL Injection

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.CVE-2013-4887Xibosignage · 1.2% likely

   CWE-89

2. Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filterCVE-2023-33178xibosignage · CVSS 6.5 · 0.6% likely

   CWE-89

3. Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display mapCVE-2023-33180xibosignage · CVSS 6.5 · 0.6% likely

   CWE-89

4. Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilterCVE-2023-33179xibosignage · CVSS 6.5 · 0.6% likely

   CWE-89

5. Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data ImportCVE-2024-41802xibosignage · CVSS 8.1 · 0.5% likely

   CWE-89

6. Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet FilterCVE-2024-41803xibosignage · CVSS 4.9 · 0.4% likely

   CWE-89

7. Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play reportCVE-2024-41944xibosignage · CVSS 6.5 · 0.4% likely

   CWE-89

8. Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column FormulaCVE-2024-41804xibosignage · CVSS 6.5 · 0.4% likely

   CWE-89

9. Xibo CMS API has SQL Injection via DataSet Filter ParameterCVE-2026-31952xibosignage · CVSS 7.6 · 0.2% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.