File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)CVE-2019-10647Zzzcms · 6.6% likely

   CWE-434

2. File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,…CVE-2023-45554Zzzcms · CVSS 9.8 · 2.0% likely

   CWE-434

3. ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php…CVE-2019-16720Zzzcms · 1.4% likely

   CWE-434

4. File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file.CVE-2023-45555Zzzcms · 1.1% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.