CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- phpgurukul boat booking systemPHPGurukul Boat Booking System add-subadmin.php sql injection6.9 Medium
- phpgurukul bus pass management systemPHPGurukul Bus Pass Management System view-pass-detail.php sql injection6.9 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System visitor-entry.php sql injection5.3 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System add-apartment.php sql injection5.3 Medium
- oretnom23 online medicine ordering systemSourceCodester Online Medicine Ordering System manage_category.php sql injection5.3 Medium
- oretnom23 online medicine ordering systemSourceCodester Online Medicine Ordering System view_category.php sql injection5.3 Medium
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injection6.9 Medium
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System changeimage.php sql injection6.9 Medium
- fcba zzm ics-park smart park management system, smart park management system +1 morefcba_zzm ics-park Smart Park Management System update sql injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System add_overtime.php sql injection5.3 Medium
- phpgurukul apartment visitors management systemSourceCodester Apartment Visitors Management System add-apartment.php sql injection5.3 Medium
- oretnom23 online tutor portalSourceCodester Online Tutor Portal manage_course.php sql injection5.3 Medium
- oretnom23 online tutor portalSourceCodester Online Tutor Portal view_course.php sql injection5.3 Medium
- oretnom23 apartment visitor management systemoretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System add_employee.php sql injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System view_account.php sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Users.php sql injection5.3 Medium
- jinher oaJinher Network OA NetDiskProperty.aspx sql injection5.3 Medium
- novastar cx40Novastar CX40 NetFilter Utility netconfig popen command injection5.1 Medium
- phpgurukul e-diary management systemPHPGurukul e-Diary Management System edit-category.php sql injection6.9 Medium
- esafenet cdgESAFENET CDG UserAjax sql injection5.3 Medium
- primekey ejbcaImproper Neutralization of Special Elements vulnerability in EJBCA5.1 Medium
- code-projects payroll management systemcode-projects Payroll Management System update_account.php sql injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System delete.php sql injection5.3 Medium
- bluestar micro mallBluestar Micro Mall data.php sql injection5.3 Medium
- esafenet cdgESAFENET CDG getFileTypeList.jsp sql injection6.9 Medium
- aishida call center systemAishida Call Center System amr2mp3 command injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System update_employee.php sql injection5.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System view_menu.php sql injection5.1 Medium
- code-projects gym management systemCodezips Gym Management System over_month.php sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Registration Users.php registration sql injection6.9 Medium
- alfasado inc. powercms 4.x series, powercms 5.x series, powercms 6.x series +2 moreThe affected versions of PowerCMS allow HTTP header injection. This vulnerability can be...5.3 Medium
- mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统, mingyuefusu library management system +1 moremingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 bookList getBookList sql injection5.3 Medium
- hitachi energy trmtrackerA Host Header Injection vulnerability in TRMTracker application may allow an attacker by...6.1 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System eligibility.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System manage-services.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System manage-scdetails.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System contactus.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System bwdates-report-details.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System add-services.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System aboutus.php sql injection6.9 Medium
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getWifiNeighbour command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getDualbandSync command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getssidname command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request networkSetup command injection8.6 High
- h3c magic nx30 pro, magic nx400 +1 moreH3C Magic NX30 Pro/Magic NX400 getNetworkConf command injection8.6 High
- h3c magic nx30 proH3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request esps command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request auth command injection8.6 High
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System search-report-details.php sql injection6.9 Medium
- Show moreLoading…