CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection8.7 High
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection5.3 Medium
- shanyu sycmsshanyu SyCms Administrative Panel FileManageController.class.php addPost code injection5.1 Medium
- chenjinchuang lin-cms-tp5ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection5.3 Medium
- fantasticlbp hotels serverFantasticLBP Hotels_Server Room.php sql injection6.9 Medium
- ketr jepaasketr JEPaaS loadPostil postilService.loadPostils sql injection5.3 Medium
- jd cloud be6500JD Cloud BE6500 jdcapi sub_4780 command injection5.3 Medium
- angeljudesuarez student management systemitsourcecode Student Management System list_report.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System form137.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System student_p.php sql injection6.9 Medium
- itsourcecode online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System customer_details.php sql injection6.9 Medium
- itsourcecode online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System contact_us.php sql injection6.9 Medium
- code-projects student information systemcode-projects Student Information System searchresults.php sql injection6.9 Medium
- anisha online farm systemcode-projects Online Farm System addProduct.php sql injection6.9 Medium
- tenda wh450, wh450 firmware +1 moreTenda WH450 HTTP Request CheckTools command injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System record.php sql injection6.9 Medium
- loganhong php logansiteloganhong php loganSite Article article_detail.php sql injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System home.php sql injection6.9 Medium
- carmelo simple stock systemcode-projects Simple Stock System logout.php sql injection6.9 Medium
- dedecmsDedeCMS freelist_main.php sql injection5.3 Medium
- airc mynetIframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before...9.6 Critical
- seacmsSeaCMS admin_video.php sql injection5.1 Medium
- seacmsSeaCMS mysqli.class.php sql injection6.9 Medium
- campcodes complete online beauty parlor management systemCampcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection6.9 Medium
- campcodes complete online beauty parlor management systemCampcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection6.9 Medium
- carmelo simple stock systemcode-projects Simple Stock System update.php sql injection6.9 Medium
- angeljudesuarez student management systemitsourcecode Student Management System candidates_report.php sql injection6.9 Medium
- fastadminFastAdmin Backend Controller Backend.php selectpage sql injection5.1 Medium
- code-projects simple blood donor management systemcode-projects Simple Blood Donor Management System editedcampaign.php sql injection6.9 Medium
- code-projects simple blood donor management systemcode-projects Simple Blood Donor Management System editeddonor.php sql injection6.9 Medium
- carmelo simple stock systemcode-projects Simple Stock System signup.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_category.php sql injection6.9 Medium
- code-projects scholars tracking systemcode-projects Scholars Tracking System home.php sql injection6.9 Medium
- code-projects scholars tracking systemcode-projects Scholars Tracking System delete_post.php sql injection6.9 Medium
- code-projects scholars tracking systemcode-projects Scholars Tracking System delete_user.php sql injection6.9 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System deletemanager.php sql injection5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection5.1 Medium
- d-link dir-605, dlink dir-605 firmware +1 moreD-Link DIR-605 Firmware Update Service command injection8.6 High
- campcodes supplier management systemCampcodes Supplier Management System add_retailer.php sql injection6.9 Medium
- ruoyiy_project RuoYi getnames code injection5.3 Medium
- zzcmsZZCMS Backend Website Settings siteconfig.php stripfxg code injection5.1 Medium
- carmelo simple stock systemcode-projects Simple Stock System checkuser.php sql injection5.3 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System deletemanagerclinic.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System updateproduct.php sql injection6.9 Medium
- xiongwei smart catering cloud platformXiongwei Smart Catering Cloud Platform dish_trade_detail_get sql injection5.3 Medium
- Show moreLoading…