CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- yonyou u8 cloudYonyou U8 Cloud AppServletService.class sql injection5.3 Medium
- sgai space1 nas n1211dsSGAI Space1 NAS N1211DS gsaiagent JSONAPI NGNIX_UPLOAD command injection5.3 Medium
- zspace q2c nas, q2c nas firmware +1 moreZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injection8.7 High
- zspace q2c nas, q2c nas firmware +1 moreZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injection8.7 High
- zspace q2c nas, q2c nas firmware +1 moreZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injection8.7 High
- trippwastaken php-guitar-shopTrippWasTaken PHP-Guitar-Shop Product Details product.php sql injection6.9 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System cardmake_down.php sql injection5.1 Medium
- jizhicmsJIZHICMS Batch Delete Comments deleteAll.html delete sql injection5.1 Medium
- jizhicmsJIZHICMS Add Display Name Field addcomment.html commentlist sql injection5.1 Medium
- jsnjfz webstack-gunsjsnjfz WebStack-Guns PageFactory.java sql injection5.3 Medium
- adslr nbr1005gpev2, b-qe2w401 firmware +1 moreADSLR NBR1005GPEV2 send_order.cgi set_mesh_disconnect command injection5.3 Medium
- adslr nbr1005gpev2, b-qe2w401 firmware +1 moreADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_del command injection5.3 Medium
- adslr nbr1005gpev2, b-qe2w401 firmware +1 moreADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_add command injection5.3 Medium
- adslr b-qe2w401, b-qe2w401 firmware +1 moreADSLR B-QE2W401 send_order.cgi parameterdel_swifimac command injection5.3 Medium
- No product listedQualitor getResumo.php eval code injection6.9 Medium
- chanjet crmChanjet CRM upgradeattribute.php sql injection6.9 Medium
- taosir wtcmstaosir WTCMS index.php fetch code injection6.9 Medium
- taosir wtcmstaosir WTCMS CommentadminController CommentadminController.class.php delete sql injection5.3 Medium
- taosir wtcmstaosir WTCMS SlideController SlideController.class.php delete sql injection6.9 Medium
- caidoCaido Improperly Handles External Links in Markdown4.3 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System changepassword.php sql injection5.1 Medium
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System login.php sql injection6.9 Medium
- carmelo question paper generatorcode-projects Question Paper Generator POST Parameter signupscript.php sql injection6.9 Medium
- anisha jonnys liquorcode-projects Jonnys Liquor GET Parameter detail.php sql injection6.9 Medium
- code-projects student information systemitsourcecode Student Information System schedule_edit1.php sql injection5.3 Medium
- code-projects library systemcode-projects Library System mail.php sql injection5.3 Medium
- code-projects library systemcode-projects Library System return.php sql injection5.3 Medium
- code-projects library systemcode-projects Library System Login index.php sql injection6.9 Medium
- code-projects blog sitecode-projects Blog Site Category blog.php category_exists sql injection5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System delete_admin.php sql injection6.9 Medium
- code-projects simple food ordering system, fabian simple cafe ordering system +1 morecode-projects Simple Food Ordering System listorder.php sql injection5.3 Medium
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System page sql injection5.3 Medium
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System page sql injection5.3 Medium
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System page sql injection5.3 Medium
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System page sql injection5.3 Medium
- d-link dir-852, dlink dir-852 firmware +1 moreD-Link DIR-852 gena.cgi command injection6.9 Medium
- sourcecodester company website cmsSourceCodester Company Website CMS index.php sql injection6.9 Medium
- sourcecodester company website cmsSourceCodester Company Website CMS reset-password.php sql injection6.9 Medium
- campcodes online polling systemCampcodes Online Polling System registeracc.php sql injection6.9 Medium
- campcodes online polling systemCampcodes Online Polling System checklogin.php sql injection6.9 Medium
- campcodes school file management systemCampcodes School File Management System Login index.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System Login index.php sql injection6.9 Medium
- ashraf-kabir travel-agencyashraf-kabir travel-agency Search results.php sql injection5.3 Medium
- ashraf-kabir travel-agencyashraf-kabir travel-agency index.php sql injection5.1 Medium
- admerc file management system, itsourcecode online file management system +1 moreitsourcecode Online File Management System ajax.php sql injection6.9 Medium
- dataeaseDataEase DB2 JNDI Vulnerability8.9 High
- code-projects online shop projectSourceCodester Online Shop Project action.php sql injection6.9 Medium
- code-projects online shop projectcode-projects Online Shop Project login.php sql injection6.9 Medium
- utt 进取 750w, 750w firmware +1 moreUTT 进取 750W formPdbUpConfig system command injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_product.php sql injection5.1 Medium
- Show moreLoading…