CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- phpgurukul tourism management systemPHPGurukul Tourism Management System user-bookings.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System editprofile.php sql injection5.3 Medium
- code-projects student information systemcode-projects Student Information System register.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System index.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System searchquery.php sql injection6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System LogSignModal.PHP sql injection6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.3 Medium
- code-projects inventory management systemitsourcecode Inventory Management System login.php sql injection6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.3 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection6.9 Medium
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection5.1 Medium
- fantasticlbp hotels serverFantasticLBP Hotels Server hotelList.php sql injection5.3 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System addmem.php sql injection6.9 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System login.php sql injection6.9 Medium
- bdtask wholesale, wholesale inventory control and inventory management system +1 moreBdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting5.1 Medium
- bdtask saleserpBdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting5.1 Medium
- code-projects gym management systemCodeAstro Gym Management System view-member-report.php sql injection5.3 Medium
- zzcmsZZCMS wangkan_list.php sql injection5.3 Medium
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System edit_account.php sql injection6.9 Medium
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System add_query_reserve.php sql injection6.9 Medium
- uryury-erp ury pos_extend.py overrided_past_order_list sql injection5.3 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System get_firstdate.php sql injection5.3 Medium
- pamzey patients waiting area queue management systemSourceCodester Patients Waiting Area Queue Management System api_patient_checkin.php getPatientAppointment sql injection6.9 Medium
- cameasy liketeacameasy Liketea API Endpoint StoreController.php list sql injection6.9 Medium
- zoom workplace, zoom communications inc. workplace for android, zoom meeting software development kit +2 moreZoom Workplace for Android - Improper Authorization Handling8.1 High
- code-projects responsive hotel sitecode-projects Responsive Hotel Site usersetting.php sql injection5.1 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site usersettingdel.php sql injection5.1 Medium
- oretnom23 survey application systemSourceCodester Survey Application System view_survey.php sql injection6.9 Medium
- oretnom23 alumni management systemSourceCodester Alumni Management System manage_career.php sql injection5.3 Medium
- openidentityplatform openamOpenAM allows use of arbitrary OIDC requested claims values in id_token and user_info8.1 High
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection5.3 Medium
- combodo itopCombodo iTop vulnerable to Remote Code Execution in the backup creation functionality8.6 High
- janobe interview management systemSourceCodester Interview Management System addCandidate.php sql injection5.3 Medium
- projectworlds online admission systemprojectworlds Online Admission System process_login.php sql injection6.9 Medium
- janobe baby care systemSourceCodester Baby Care System updatewelcome.php sql injection5.3 Medium
- janobe baby care systemSourceCodester Baby Care System admin.php sql injection5.1 Medium
- code-projects food ordering systemSourceCodester Food Ordering System edit-orders.php sql injection5.3 Medium
- code-projects food ordering systemSourceCodester Food Ordering System view-ticket.php sql injection5.3 Medium
- oretnom23 survey application systemSourceCodester Survey Application System LoginRegistration.php update_user sql injection6.9 Medium
- code-projects online job search enginecode-projects Online Job Search Engine login.php sql injection6.9 Medium
- dedebizDedeBIZ archives_add.php sql injection5.1 Medium
- janobe farm management systemSourceCodester Farm Management System review.php sql injection5.3 Medium
- neo4j community edition, openclinica +1 moreOpenClinica Community Edition CRF Data Import ImportCRFData xml injection5.3 Medium
- sangfor operation and maintenance security management systemSangfor Operation and Maintenance Security Management System Frontend portal_login command injection5.3 Medium
- aapanel baotaaaPanel BaoTa Backend database sql injection5.1 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site roomdel.php sql injection5.1 Medium
- campcodes school file management, school file management system +1 moreCampcodes School File Management update_user.php sql injection5.1 Medium
- dedebizDedeBIZ spec_add.php sql injection5.1 Medium
- dedebizDedeBIZ freelist_main.php sql injection5.1 Medium
- dedebizDedeBIZ templets_one_edit.php sql injection5.1 Medium
- Show moreLoading…