CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- anisha online guitar storecode-projects Online Guitar Store login.php sql injection6.9 Medium
- anisha online guitar storecode-projects Online Guitar Store Delete_product.php sql injection6.9 Medium
- anisha online guitar storecode-projects Online Guitar Store Create_product.php sql injection6.9 Medium
- anisha online guitar storecode-projects Online Guitar Store Create_category.php sql injection6.9 Medium
- itsourcecode school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- pkrystian full-stack-bankPKrystian Full-Stack-Bank User sql injection5.1 Medium
- idreamsoft icmsiCMS POST Parameter ConfigAdmincp.php save code injection5.1 Medium
- kodicms-kohana kodicmsKohana KodiCMS Layout API Endpoint file.php save code injection5.3 Medium
- kodicms-kohana kodicmsKohana KodiCMS Search API Endpoint page.php like sql injection5.3 Medium
- d-link dir-806a, dlink dir-806a firmware +1 moreD-Link DIR-806A SSDP Request ssdpcgi_main command injection5.3 Medium
- d-link di-7400g+, dlink di-7400g\+ firmware +1 moreD-Link DI-7400G+ msp_info.htm command injection5.3 Medium
- angeljudesuarez society management systemitsourcecode Society Management System add_admin.php sql injection6.9 Medium
- angeljudesuarez society management systemitsourcecode Society Management System edit_admin_query.php edit_admin_query sql injection6.9 Medium
- biggidroid simple php cmsBiggiDroid Simple PHP CMS Admin Login login.php sql injection6.9 Medium
- edimax br-6208ac, br-6208ac firmware +1 moreEdimax BR-6208AC Web-based Configuration formRoute command injection6.9 Medium
- edimax br-6208ac, br-6208ac firmware +1 moreEdimax BR-6208AC Web-based Configuration formStaDrvSetup command injection6.9 Medium
- composerComposer vulnerable to ANSI sequence injection1.3 Low
- 08cms novel system08CMS Novel System Template mtpls.inc.php code injection5.1 Medium
- carmelo simple stock systemcode-projects Simple Stock System login.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System regfood.php sql injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System refugee.php sql injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System editrefugee.php sql injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System editfood.php sql injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System editrefugee.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System view_products.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_area.php sql injection6.9 Medium
- code-projects student file management systemcode-projects Student File Management System download.php sql injection5.3 Medium
- olell uuruIn µURU, a Specially Crafted Federation Name Allows Dialplan Injection6.3 Medium
- code-projects college notes uploading systemcode-projects College Notes Uploading System login.php sql injection6.9 Medium
- code-projects assessment managementcode-projects Assessment Management login.php sql injection6.9 Medium
- code-projects assessment managementcode-projects Assessment Management add-module.php sql injection6.9 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection5.3 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection5.3 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System addusers.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System refugeesreport.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System refugeesreport2.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System viewtakenfd.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System served.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System pagenateRefugeesList.php sql injection6.9 Medium
- biggidroid simple php cmsBiggiDroid Simple PHP CMS editsite.php sql injection5.1 Medium
- angeljudesuarez student management systemitsourcecode Student Management System statistical.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System detailtransac.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System updatesupplier.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System updatecustomer.php sql injection6.9 Medium
- cmseasyCmsEasy Backend Template Management template_admin.php savetemp_action code injection5.1 Medium
- eyoucmsEyouCMS Backend Template Management FilemanagerLogic.php sql injection5.1 Medium
- 9786 phpok3w9786 phpok3w show.php sql injection6.9 Medium
- saiftheboss7 onlinemcqexamsaiftheboss7 onlinemcqexam quesadd.php sql injection6.9 Medium
- trendnet tew-822dre, tew-822dre firmware +1 moreTRENDnet TEW-822DRE formWsc sub_43ACF4 command injection5.3 Medium
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection8.7 High
- Show moreLoading…