CWE-707: Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.
From the CWE List. © The MITRE Corporation.
Newest
- annyshow duxcmsannyshow DuxCMS Article edit cross site scripting2.4 Low
- coder-chain gdut project gdut, csliuwy coder-chain gdut +1 morecsliuwy coder-chain_gdut cross site scripting3.5 Low
- maku maku-bootmaku-boot Scheduled Task AbstractScheduleJob.java doExecute injection6.3 Medium
- unspecified fastcmsFastCMS Template edit injection6.3 Medium
- heyewei springbootcmsSpringBootCMS Template Management injection4.7 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System employeeview.php cross site scripting3.5 Low
- itsourcecode human resource management systemSourceCodester Human Resource Management System employeeadd.php sql injection4.7 Medium
- shaoxing background management systemShaoxing Background Management System Bd sql injection6.3 Medium
- house rental system project rental system, unspecified house rental system +1 moreHouse Rental System POST Request search-property.php sql injection6.3 Medium
- house rental system project rental system, unspecified house rental system +1 moreHouse Rental System view-property.php sql injection6.3 Medium
- c-data web management system, cdatatec c-data web management system +1 moreC-DATA Web Management System GET Parameter jumpto.php argument injection6.3 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System customer.php builtin_echo cross site scripting3.5 Low
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System categories.php builtin_echo cross site scripting3.5 Low
- movie ticket booking system project ticket booking system, unspecified movie ticket booking system +1 moreMovie Ticket Booking System editBooking.php cross site scripting2.4 Low
- movie ticket booking system project ticket booking system, unspecified movie ticket booking system +1 moreMovie Ticket Booking System booking.php cross site scripting3.5 Low
- movie ticket booking system project ticket booking system, unspecified movie ticket booking system +1 moreMovie Ticket Booking System POST Request cross site scripting3.5 Low
- movie ticket booking system project ticket booking system, unspecified movie ticket booking system +1 moreMovie Ticket Booking System editBooking.php sql injection5.0 Medium
- movie ticket booking system project ticket booking system, unspecified movie ticket booking system +1 moreMovie Ticket Booking System booking.php sql injection6.3 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System brand.php builtin_echo cross site scripting3.5 Low
- rinvizle event registration systemSourceCodester Event Registration System cross site scripting2.4 Low
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection5.0 Medium
- sapido br270n, brc76n, gr297 +5 more +7 moreSapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection6.3 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System food.php query cross site scripting3.5 Low
- rickxy stock management system, stock management system project management system +1 morerickxy Stock Management System processlogin.php cross site scripting4.3 Medium
- rickxy stock management system, stock management system project management system +1 morerickxy Stock Management System processlogin.php sql injection7.3 High
- dalli project dalliDalli Meta Protocol request_formatter.rb self.meta_set injection6.3 Medium
- student attendance management system project attendance management system, unspecified student attendance management system +1 moreStudent Attendance Management System createClass.php cross site scripting2.4 Low
- student attendance management system project attendance management system, unspecified student attendance management system +1 moreStudent Attendance Management System createClass.php sql injection4.7 Medium
- hostel searching project searching project, unspecified hostel searching project +1 moreHostel Searching Project view-property.php sql injection6.3 Medium
- freeprojectscodes sports club management system, sports club management system project club management system +1 moreSports Club Management System make_payments.php sql injection4.7 Medium
- hospital management center project management center, unspecified hospital management center +1 moreHospital Management Center patient-info.php sql injection6.3 Medium
- simple history project history, unspecified simple history plugin +1 moreSimple History Plugin Header neutralization for logs6.5 Medium
- mercurial scmMonikaBrzica scm uredi_korisnika.php sql injection6.3 Medium
- mercurial scmMonikaBrzica scm upis_u_bazu.php sql injection6.3 Medium
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System Banner Image cross site scripting2.4 Low
- elated-themes frappeFrappe Search navbar_search.html cross site scripting3.5 Low
- nukeviet cms, nukeviet +1 moreNukeViet CMS Data URL Request.php filterAttr cross site scripting3.5 Low
- hms-php project hms-phpPingkon HMS-PHP Data Pump Metadata admin.php sql injection7.3 High
- hms-php project hms-phpPingkon HMS-PHP adminlogin.php sql injection7.3 High
- matrix-org matrix-appservice-irc, matrix irc bridge +1 morematrix-appservice-irc PgDataStore.ts sql injection4.6 Medium
- emlogemlog article_save.php cross site scripting3.5 Low
- unspecified vesta control panel, vestacp control panel +1 moreVesta Control Panel sed main.sh argument injection5.3 Medium
- sir gnuboard, unspecified gnuboard5 +1 moregnuboard5 FAQ Key ID faq.php cross site scripting3.5 Low
- hhims project hhimstsruban HHIMS Patient Portrait sql injection6.3 Medium
- crm42 project crm42tholum crm42 Login class.user.php sql injection7.3 High
- publiccmssanluan PublicCMS Tab dwz.min.js initLink cross site scripting3.5 Low
- simple cashiering system project cashiering system, sourcecodester simple cashiering system +1 moreSourcecodester Simple Cashiering System User Account cross site scripting3.5 Low
- eolink goku liteeolinker goku_lite getList sql injection6.3 Medium
- eolink goku liteeolinker goku_lite list sql injection6.3 Medium
- foru cmsForU CMS cms_chip.php cross site scripting3.5 Low
- Show moreLoading…