CWE-707: Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.
From the CWE List. © The MITRE Corporation.
Newest
- shoplazza lifestyleShoplazza LifeStyle Create Product v2_products cross site scripting3.5 Low
- unspecified shoplazza, shoplazza lifestyle +1 moreShoplazza Add Blog Post cross site scripting3.5 Low
- django-openipam project django-openipamdjango-openipam exposed_hosts.html cross site scripting3.5 Low
- retra-system project retra-systemretra-system cross site scripting3.5 Low
- crmx project crmxluckyshot CRMx index.php commentdelete sql injection6.3 Medium
- ctrlo lenioctrlo lenio Task task.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio index.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio contractor.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio Notice main.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio Ticket Lenio.pm cross site scripting3.5 Low
- unknown wp-banWP-Ban ban-options.php toggle_checkbox cross site scripting3.5 Low
- as project asas include.cdn.php getFullURL cross site scripting3.5 Low
- mschaef totomschaef toto Email Parameter cross site scripting3.5 Low
- mschaef totomschaef toto Todo List cross site scripting3.5 Low
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting4.3 Medium
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting3.5 Low
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting3.5 Low
- starter-public-edition-4 project starter-public-edition-4starter-public-edition-4 cross site scripting3.5 Low
- 1j01 mind-map1j01 mind-map app.coffee cross site scripting3.5 Low
- roxlukas lmeveroxlukas LMeve Login Page sql injection6.3 Medium
- ruoyiy_project RuoYi GenController sql injection5.5 Medium
- unspecified semanticdrilldown extension, mediawiki semantic drilldown +1 moreSemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting3.5 Low
- inex ipx-manager, ixp manager +1 moreINEX IPX-Manager list.foil.php cross site scripting3.5 Low
- alinto sogoAlinto SOGo Folder/Mail NSString+Utilities.m cross site scripting3.5 Low
- alinto sogoAlinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting3.5 Low
- django-photologue project django-photologuedjango-photologue Default Template photo_detail.html cross site scripting3.5 Low
- unspecified vexim2, virtual exim project exim 2 +1 morevexim2 cross site scripting3.5 Low
- calendarxpCalendarXP cross site scripting3.5 Low
- wso2 carbon-registryWSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scripting3.5 Low
- opencaching oc-server3Opencaching Deutschland oc-server3 varset.inc.php cross site scripting3.5 Low
- european environment agency eionet.contreg, eea eionet content registry +1 moreEuropean Environment Agency eionet.contreg cross site scripting3.5 Low
- fallingfruit falling-fruitfalling-fruit cross site scripting3.5 Low
- m0ver bible-onlinem0ver bible-online Search search.java query sql injection5.5 Medium
- ipti br.tag, tag +1 moreipti br.tag cross site scripting3.5 Low
- rathena fluxcprAthena FluxCP Service Desk Image URL view.php cross site scripting3.5 Low
- rainygao docsys, mxsdoc project mxsdoc +1 moreRainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection6.3 Medium
- unspecified yikes-inc-easy-mailchimp-extender plugin, yikesplugins easy forms for mailchimp +1 moreyikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross site scripting2.6 Low
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System ajax_represent.php sql injection6.3 Medium
- pallidlight online-course-selection-system, pallidlight online course selection system project online course selection system +1 morepallidlight online-course-selection-system cross site scripting3.5 Low
- fs-blog project fs-blogzbl1996 FS-Blog Title cross site scripting3.5 Low
- nodau project nodauTicklishHoneyBee nodau db.c sql injection5.5 Medium
- pyrdfa3 project pyrdfa3RDFlib pyrdfa3 __init__.py _get_option cross site scripting3.5 Low
- s-cmsS-CMS Contact Information Page cross site scripting3.5 Low
- mingsoft mcmsMingsoft MCMS list sql injection6.3 Medium
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 Web Service palette.php command injection6.9 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Message Board comment cross site scripting4.3 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting3.5 Low
- mingsoft mcmsMingsoft MCMS search.do cross site scripting3.5 Low
- ruoyi ruoyi-cloudy_project RuoYi-Cloud JSON cross site scripting3.5 Low
- beetl-bbs project beetl-bbsxiandafu beetl-bbs WebUtils.java cross site scripting3.5 Low
- Show moreLoading…