CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- projectworlds advanced library management systemprojectworlds Advanced Library Management System view_book.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_unit.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_distributor.php sql injection6.9 Medium
- efm iptime a3004tEFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection2.3 Low
- angeljudesuarez student management systemitsourcecode Student Management System new_grade.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System promote.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System new_school_year.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System new_adviser.php sql injection6.9 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). Under...7.5 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). Code...8.6 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). The SCEP...8.6 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +9 more +11 moreA vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). The DHCP...8.7 High
- code-projects employee profile management systemcode-projects Employee Profile Management System edit_personnel.php sql injection6.9 Medium
- ilevia eve x1 serverIlevia EVE X1 Server leaf_search.php command injection6.3 Medium
- jihai jshop miniprogram mall systemJihai Jshop MiniProgram Mall System api.html sql injection5.3 Medium
- angeljudesuarez student management systemitsourcecode Student Management System newsubject.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System newrecord.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System newcurriculm.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System Admin Login admin sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System user_contact.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System user_school.php sql injection6.9 Medium
- code-projects simple shopping cartcode-projects Simple Shopping Cart adminlogin.php sql injection6.9 Medium
- code-projects simple shopping cartcode-projects Simple Shopping Cart additems.php sql injection5.3 Medium
- code-projects simple shopping cartcode-projects Simple Shopping Cart settings.php sql injection5.3 Medium
- ideacmsIdeaCMS Coupon.php whereRaw sql injection6.9 Medium
- carmelo daily time recording systemcode-projects Daily Time Recording System add_payroll.php sql injection5.3 Medium
- code-projects inventory management systemSourceCodester Inventory Management System SVC Report Export csv injection5.1 Medium
- philipinho simple-php-blogPhilipinho Simple-PHP-Blog edit.php sql injection5.3 Medium
- angeljudesuarez student management systemitsourcecode Student Management System edit_user.php sql injection6.9 Medium
- d-link dcs-930l, dlink dcs-930l firmware +1 moreD-Link DCS-930L alphapd setSystemAdmin command injection5.3 Medium
- carmelo simple leave managercode-projects Simple Leave Manager request.php sql injection6.9 Medium
- carmelogarcia employee profile management systemcode-projects Employee Profile Management System print_personnel_report.php sql injection5.3 Medium
- code-projects currency exchange systemcode-projects Currency Exchange System editotheraccount.php sql injection6.9 Medium
- code-projects currency exchange systemcode-projects Currency Exchange System edittrns.php sql injection6.9 Medium
- code-projects currency exchange systemcode-projects Currency Exchange System viewserial.php sql injection6.9 Medium
- code-projects currency exchange systemcode-projects Currency Exchange System edit.php sql injection6.9 Medium
- code-projects student information system, angeljudesuarez student management system +1 moreitsourcecode Student Information System section_edit1.php sql injection5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System member_search.php sql injection6.9 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System delete_book.php sql injection6.9 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System delete_member.php sql injection6.9 Medium
- campcodes school file management systemCampcodes School File Management System update_query.php sql injection6.9 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_wan_settings sub_415028 command injection5.3 Medium
- tushar-2223 hotel-management-systemtushar-2223 Hotel-Management-System invoiceprint.php sql injection6.9 Medium
- carmelo question paper generatorcode-projects Question Paper Generator selectquestionuser.php sql injection5.3 Medium
- carmelogarcia employee profile management systemcode-projects Employee Profile Management System view_personnel.php sql injection5.3 Medium
- rashmindungrani online-bankingRashminDungrani online-banking auth_login.php sql injection6.9 Medium
- chanjet tplusChanjet TPlus sql injection6.9 Medium
- chanjet crmChanjet CRM jxf_dump_table_demo.php sql injection6.9 Medium
- ugreen dh2100+UGREEN DH2100+ nas_svr create handler_file_backup_create command injection8.6 High
- grandstream gxp1625Grandstream GXP1625 Network Status api.values.post cross site scripting5.1 Medium
- Show moreLoading…