CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System nlog_down.php command injection5.1 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System new-user-testing.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System edit-phlebotomist.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System check_availability.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System bwdates-report-result.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System add-phlebotomist.php sql injection6.9 Medium
- code-projects news publishing site dashboardcodeprojects News Publishing Site Dashboard api.php sql injection5.3 Medium
- opplus springboot-adminopplus springboot-admin SysLogDao.xml sql injection5.3 Medium
- 201206030 novel-cloud201206030 novel-cloud BookInfoMapper.xml RestResp sql injection5.3 Medium
- code-projects patient record management systemcodeprojects Patient Record Management System edit_rpatient.php.php sql injection5.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus searchByPage sql injection5.3 Medium
- markparticle webservermarkparticle WebServer Login httprequest.cpp sql injection6.9 Medium
- markparticle webservermarkparticle WebServer Registration httprequest.cpp sql injection6.9 Medium
- panhainan ds-javapanhainan DS-Java FileUpload.java uploadUserPic.action code injection5.3 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System sales-reports-detail.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System view-appointment.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System forgot-password.php sql injection6.9 Medium
- convertigoTwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.2.2 Low
- phpgurukul men salon management systemPHPGurukul Men Salon Management System search-appointment.php sql injection6.9 Medium
- webpy web.pywebpy web.py db.py PostgresDB._process_insert_query sql injection5.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Master.php sql injection5.3 Medium
- sarrionandia tournatracksarrionandia tournatrack Jinja2 Template check_id.py injection4.8 Medium
- thautwarm vscode-dianathautwarm vscode-diana Jinja2 Template Gen.py injection4.8 Medium
- wcmsWCMS AnonymousController.php sql injection6.9 Medium
- wcmsWCMS AnonymousController.php sql injection6.9 Medium
- seacmsSeaCMS admin_topic.php sql injection5.1 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System contact-us.php sql injection5.3 Medium
- seacmsSeaCMS admin_link.php sql injection5.1 Medium
- croogocroogo Host header injection9.1 Critical
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System Login sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System edit-services.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System edit-customer-detailed.php sql injection6.9 Medium
- code-projects patient record management systemcode-projects Patient Record Management System edit_fpatient.php sql injection5.3 Medium
- xianqi kindergarten management systemXianqi Kindergarten Management System Child Management stu_list.php sql injection5.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus books sql injection5.3 Medium
- oretnom23 music class enrollment systemSourceCodester Music Class Enrollment System manage_class.php sql injection5.3 Medium
- fannuo enterprise content management system 凡诺企业网站管理系统Fannuo Enterprise Content Management System 凡诺企业网站管理系统 cms_chip.php sql injection5.3 Medium
- wuzhicmsWuzhiCMS Setting index.php set code injection5.1 Medium
- ghostxbh uzy-ssm-mallghostxbh uzy-ssm-mall 20 ForeProductListController sql injection5.3 Medium
- phpshephpshe admin.php pe_delete sql injection5.3 Medium
- h3c magic be18000, magic nx15, magic nx30 pro +7 more +9 moreH3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injection8.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injection8.6 High
- h3c magic nx15, magic nx400, magic r3010 +2 moreH3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection8.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection8.6 High
- h3c magic nx15, magic nx30 pro, magic nx400 +1 more +3 moreH3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection8.6 High
- h3c magic be18000, magic nx15, magic nx30 pro +2 more +4 moreH3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection8.6 High
- Show moreLoading…