CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- trendnet tew-831drTRENDnet TEW-831DR formSysCmd command injection5.1 Medium
- rockwell automation stratix iosRockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability8.6 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_static_leases sub_415028 command injection6.9 Medium
- maccmsMaccms10 Database.php rep sql injection5.1 Medium
- No product listeduverif kami_list addbatch sql injection5.3 Medium
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 login.php sql injection6.9 Medium
- No product listedSiempreCMS user_search_ajax.php sql injection6.9 Medium
- phpgurukul small crmPHPGurukul Small CRM profile.php sql injection6.9 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System index.php sql injection6.9 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System index.php sql injection6.9 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System index.php sql injection6.9 Medium
- chancmsChanCMS search sql injection5.3 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- chancmsyanyutao0402 ChanCMS search sql injection5.3 Medium
- chancmsyanyutao0402 ChanCMS search sql injection5.3 Medium
- carmelo online event judging systemcode-projects Online Event Judging System review_search.php sql injection6.9 Medium
- carmelo online event judging systemcode-projects Online Event Judging System home.php sql injection6.9 Medium
- carmelo online event judging systemcode-projects Online Event Judging System index.php sql injection6.9 Medium
- sourcecodester simple forum discussion system, oretnom23 simple forum\/discussion system +1 moreSourceCodester Simple Forum Discussion System admin_class.php sql injection6.9 Medium
- phpgurukul user management systemPHPGurukul User Management System edit-user-profile.php sql injection5.3 Medium
- simSimStudioAI sim route.ts code injection5.3 Medium
- jinher oaJinher OA GetTreeDate.aspx sql injection6.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software profit_report.php sql injection5.1 Medium
- campcodes online polling systemSourceCodester Online Polling System manage-admins.php sql injection6.9 Medium
- phpgurukul small crmPHPGurukul Small CRM get-quote.php sql injection6.9 Medium
- campcodes online polling systemSourceCodester Online Polling System candidates.php sql injection6.9 Medium
- campcodes online polling systemSourceCodester Online Polling System registeracc.php sql injection6.9 Medium
- campcodes online polling systemSourceCodester Online Polling System manage-profile.php sql injection6.9 Medium
- avigilon access control managerA Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute...9.8 Critical
- emiloi online discussion forumitsourcecode Online Discussion Forum add_views.php sql injection6.9 Medium
- itsourcecode student information management systemitsourcecode Student Information Management System login.php sql injection6.9 Medium
- emiloimagtolis online discussion forumitsourcecode Online Discussion Forum admin sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- campcodes grocery sales and inventory systemCampcodes Grocery Sales and Inventory System ajax.php sql injection6.9 Medium
- phpgurukul online course registrationPHPGurukul Online Course Registration semester.php sql injection6.9 Medium
- portabilis i-educarPortabilis i-Educar educar_historico_escolar_lst.php sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar edit sql injection5.3 Medium
- tesla model 3Tesla Model 3 Physical CAN Bus Injection4.7 Medium
- totolink n600r, n600r firmware +1 moreTOTOLINK N600R cstecgi.cgi sub_4159F8 command injection6.9 Medium
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R cstecgi.cgi sub_410C34 command injection5.3 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System view-appointment.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System update-image.php sql injection6.9 Medium
- 1000projects beauty parlour management system1000projects Beauty Parlour Management System contact-us.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System viewcategory.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System viewpackage.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System viewsubcategory.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System detail.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System enquiry.php sql injection6.9 Medium
- 1000projects beauty parlour management system1000projects Beauty Parlour Management System bwdates-reports-details.php sql injection6.9 Medium
- Show moreLoading…