CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- utt hiper 810, 810 firmware +1 moreUTT HiPER 810 formUser setSysAdm command injection8.6 High
- itsourcecode school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- code-projects simple blood donor management systemcode-projects Simple Blood Donor Management System editcampaignform.php sql injection6.9 Medium
- bontrofftech medical center portal management systemSourceCodester Medical Center Portal Management System emp_edit1.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection6.9 Medium
- bontrofftech medical center portal management systemSourceCodester Medical Center Portal Management System login.php sql injection6.9 Medium
- itsourcecode school management systemitsourcecode School Management System controller.php sql injection6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System controller.php sql injection6.9 Medium
- abhiphile fermat, fermat-mcp +1 moreabhiphile fermat-mcp eqn_chart.py eqn_chart code injection5.3 Medium
- dcn dcme-320, dcnetworks dcme-320 firmware +1 moreDCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection5.1 Medium
- isaacwasserman mcp-vegalite-serverisaacwasserman mcp-vegalite-server visualize_data eval code injection5.3 Medium
- nyariv sandboxjsSandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses10.0 Critical
- nyariv sandboxjsSandboxJS has a Sandbox Escape10.0 Critical
- nyariv sandboxjsSandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution10.0 Critical
- nyariv sandboxjsSandboxJS has a Sandbox Escape10.0 Critical
- No product listediomad Company Admin Block sql injection5.1 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection6.9 Medium
- parall jspdfjsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)6.9 Medium
- jeecg bootJeecgBoot Online Report API loadDictItemByKeyword sql injection5.3 Medium
- yealink meetingbar a30Yealink MeetingBar A30 Diagnostic command injection2.4 Low
- itsourcecode school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- tenda hg10, hg10 firmware +1 moreTenda HG10 formSysCmd system command injection5.1 Medium
- tenda hg10, hg10 firmware +1 moreTenda HG10 Login formLogin checkUserFromLanOrWan command injection6.9 Medium
- clive 21 directory management systemitsourcecode Directory Management System index.php sql injection6.9 Medium
- tenda hg10, hg10 firmware +1 moreTenda HG10 Boa Webserver formSamba command injection6.9 Medium
- tenda ac21, ac21 firmware +1 moreTenda AC21 mDMZSetCfg command injection5.3 Medium
- d-link dwr-m961, dlink dwr-m961 firmware +1 moreD-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injection5.3 Medium
- d-link dwr-m961, dlink dwr-m961 firmware +1 moreD-Link DWR-M961 formLtefotaUpgradeFibocom command injection5.3 Medium
- totolink a7000r, a7000r firmware +1 moreTotolink A7000R cstecgi.cgi setUpgradeFW command injection5.3 Medium
- totolink a7000r, a7000r firmware +1 moreTotolink A7000R cstecgi.cgi setUploadUserData command injection5.3 Medium
- d-link dwr-m961, dlink dwr-m961 firmware +1 moreD-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injection5.3 Medium
- angeljudesuarez society management systemitsourcecode Society Management System edit_student_query.php sql injection6.9 Medium
- angeljudesuarez society management systemitsourcecode Society Management System add_expenses.php sql injection6.9 Medium
- angeljudesuarez society management systemitsourcecode Society Management System edit_expenses_query.php sql injection6.9 Medium
- angeljudesuarez school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- angeljudesuarez school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- sem-cms semcmsSEMCMS SEMCMS_Info.php sql injection5.3 Medium
- angeljudesuarez school management systemitsourcecode School Management System controller.php sql injection5.3 Medium
- totolink a7000r, a7000r firmware +1 moreTotolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection5.3 Medium
- totolink a7000r, a7000r firmware +1 moreTotolink A7000R cstecgi.cgi setUnloadUserData command injection5.3 Medium
- jishenghua jsherpjishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection5.3 Medium
- angeljudesuarez school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- code-projects online music sitecode-projects Online Music Site AdminReply.php sql injection6.9 Medium
- code-projects online music sitecode-projects Online Music Site AdminEditUser.php sql injection6.9 Medium
- code-projects online music sitecode-projects Online Music Site AdminAddCategory.php sql injection5.1 Medium
- hisense transtech smart bus management systemHisense TransTech Smart Bus Management System TireMng.aspx Page_Load sql injection6.9 Medium
- code-projects online music sitecode-projects Online Music Site AdminDeleteUser.php sql injection6.9 Medium
- Show moreLoading…