CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- angeljudesuarez university management systemitsourcecode University Management System admin_search_student.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection6.9 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System Admindelete.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System Adminupdate.php sql injection5.1 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System Adminadd.php sql injection5.1 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System register.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System login.php sql injection6.9 Medium
- carmelo simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System Adminsearch.php sql injection6.9 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection5.1 Medium
- welovemedia ffmatewelovemedia FFmate ffmpeg.go Execute argument injection5.3 Medium
- ryuzakishinji biome-mcp-serverRyuzakiShinji biome-mcp-server biome-mcp-server.ts command injection5.3 Medium
- No product listedJeecgBoot getDictItems isExistSqlInjectKeyword sql injection5.3 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 adm.cgi usb_p910 command injection5.1 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection5.1 Medium
- caddyserver caddyCaddy: vars_regexp double-expands user input, leaking env vars and files5.5 Medium
- maximmasiutin tinywebTinyWeb: HTTP Header Control Character Injection into CGI Environment9.2 Critical
- defaultfuction jeson customer relationship management systemDefaultFuction Jeson Customer Relationship Management System edit.php sql injection5.3 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection8.6 High
- backstage, linuxfoundation backstage plugin-techdocs-node, red hat developer hub 1.8 +2 more +4 more@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution7.7 High
@perfood/couch-authnpm@perfood/couch-auth has a host header injection vulnerability9.3 Critical- osc ondemand, open ondemand +1 moreOnDemand susceptible to malicious input when navigating to a directory.6.3 Medium
- helm, langchain langsmith +1 moreLangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl8.5 High
- honoHono: SSE Control Field Injection via CR/LF in writeSSE()6.5 Medium
- angeljudesuarez college management systemitsourcecode College Management System class-result.php sql injection5.1 Medium
- angeljudesuarez college management systemitsourcecode College Management System student-fee.php sql injection5.1 Medium
- ghostGhost Vulnerable to Remote Code Execution via Malicious Themes7.7 High
- phialsbasement nmap-mcp-server, mcp nmap server +1 morePhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injection5.3 Medium
- angeljudesuarez university management systemitsourcecode University Management System admin_single_student.php sql injection6.9 Medium
- angeljudesuarez university management systemitsourcecode University Management System admin_single_student_update.php sql injection6.9 Medium
- angeljudesuarez society management systemitsourcecode Society Management System check_studid.php sql injection6.9 Medium
- eosphoros-ai db-gpteosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection6.9 Medium
- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop Registration registration.php sql injection6.9 Medium
- max-3000 maxsite cms, maxsite cms +1 moreMaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection6.9 Medium
- openclawOpenClaw Skill Env applySkillConfigenvOverrides code injection5.3 Medium
- jizhicmsjizhiCMS Batch Model.php findAll sql injection5.3 Medium
- youlai youlai-mallyoulaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection5.3 Medium
- itsourcecode school management systemitsourcecode School Management System Setting index.php sql injection6.9 Medium
- koajs koa, red hat developer hub, openshift ai (rhoai) +4 more +6 moreKoa has Host Header Injection via `ctx.hostname`7.5 High
- storybook, red hat enterprise linux 10, enterprise linux 9 +2 more +4 moreStorybook Dev Server Vulnerable to WebSocket Hijacking8.9 High
- z-9527 adminz-9527 admin user.js getUsers sql injection6.9 Medium
- swaldman mchange-commons-java, mchange commons java, red hat build of apache camel - hawtio 4 +17 more +19 moremchange-commons-java: Remote Code Execution via JNDI Reference Resolution8.9 High
- clive 21 news portal projectitsourcecode News Portal Project contactus.php sql injection6.9 Medium
- admerc document management systemitsourcecode Document Management System register.php sql injection6.9 Medium
- angeljudesuarez college management systemitsourcecode College Management System teacher-salary.php sql injection6.9 Medium
- angeljudesuarez college management systemitsourcecode College Management System login.php sql injection6.9 Medium
- angeljudesuarez college management systemitsourcecode College Management System display-teacher.php sql injection5.3 Medium
- angeljudesuarez college management systemitsourcecode College Management System asign-single-student-subjects.php sql injection5.3 Medium
- haben-cs9 simple and nice shopping cart scriptSourceCodester Simple and Nice Shopping Cart Script signup.php sql injection6.9 Medium
- Show moreLoading…