CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- clive 21 news portal projectitsourcecode News Portal Project add-category.php sql injection6.9 Medium
- clive 21 news portal projectitsourcecode News Portal Project edit-category.php sql injection6.9 Medium
- admerc document management systemitsourcecode Document Management System Login loging.php sql injection6.9 Medium
- admerc document management systemitsourcecode Document Management System edtlbls.php sql injection6.9 Medium
- admerc document management systemitsourcecode Document Management System deluser.php sql injection6.9 Medium
- hummerriskHummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection5.3 Medium
- hummerriskHummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection5.3 Medium
- hummerriskHummerRisk Cloud Task Scheduler ResourceCreateService.java command injection5.3 Medium
- a54552239 pearprojectapia54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection5.3 Medium
- emiloi e-logbook with health monitoring system for covid-19itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection6.9 Medium
- admerc event management systemitsourcecode Event Management System index.php sql injection6.9 Medium
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moreValkey Affected by RESP Protocol Injection via Lua error_reply8.5 High
- jinher oa c6Jinher OA C6 OfficeSupplyTypeRight.aspx sql injection5.3 Medium
- dst-admin project dst-adminqinming99 dst-admin restore revertBackup command injection5.3 Medium
- dromara ujcmsDromara UJCMS ImportDataController import-channel importChanel injection5.3 Medium
- code-projects online reviewer systemcode-projects Online Reviewer System studentresult-view.php sql injection6.9 Medium
- admerc vehicle management systemitsourcecode Vehicle Management System billaction.php sql injection6.9 Medium
- adonesevangelista agri-trading online shopping systemitsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection6.9 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Registration Master.php sql injection6.9 Medium
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_441CF4 command injection5.3 Medium
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_41ACCC command injection5.3 Medium
- jeecg bootJeecgBoot Backend airag_app,1,create_by sql injection5.3 Medium
- fujian smart integrated management platform systemFujian Smart Integrated Management Platform System XCamera.ashx sql injection6.9 Medium
- fujian smart integrated management platform systemFujian Smart Integrated Management Platform System XAccessPermissionPlus.ashx sql injection6.9 Medium
- man d-tale, man-group dtale +1 moreD-Tale affected by Remote Code Execution through the /save-column-filter endpoint8.1 High
- yosefhayim ebay-mcpeBay API MCP Server Affected by Environment Variable Injection8.3 High
- code-projects patient record management systemcode-projects Patient Record Management System fecalysis_not.php sql injection5.3 Medium
- admerc event management systemitsourcecode Event Management System manage_register.php sql injection6.9 Medium
- admerc event management systemitsourcecode Event Management System Admin Login ajax.php sql injection6.9 Medium
- admerc event management systemitsourcecode Event Management System manage_booking.php sql injection6.9 Medium
- langchain-ai langgraphjsRediSearch Query Injection in @langchain/langgraph-checkpoint-redis6.5 Medium
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System prinReport.html sql injection5.3 Medium
- alixhan xh-admin-backendAlixhan xh-admin-backend Database Query query sql injection5.3 Medium
- villatheme cart all in one for woocommerceCart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting7.2 High
- sciyon koyuan thermoelectricity heat network management systemSciyon Koyuan Thermoelectricity Heat Network Management System AsyncTreeProxy.aspx sql injection6.9 Medium
- huace monitoring and early warning systemHuace Monitoring and Early Warning System ProjectRole.aspx sql injection6.9 Medium
- clawdbot, openclaw +1 moreOpenClaw has Remote Code Execution via System Prompt Injection in Slack Channel Descriptions3.7 Low
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection8.6 High
- tushar-2223 hotel-management-systemtushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection5.3 Medium
- wayos fbm-220gWAYOS FBM-220G rc sub_40F820 command injection5.3 Medium
- comfast cf-e4, cf-e4 firmware +1 moreComfast CF-E4 HTTP POST Request mbox-config command injection5.1 Medium
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AB9C command injection5.3 Medium
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AC4C command injection5.3 Medium
- tosei self-service washing machineTosei Self-service Washing Machine tosei_datasend.php command injection6.9 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi AddMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi DeleteMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 login.cgi command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi multi_ssid command injection5.3 Medium
directorytree/imapenginePackagistImapEngine affected by command injection via the ID command parameters7.2 High- Show moreLoading…