CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 wizard_mgr.cgi command injection5.3 Medium
- avinashbole quip-mcp-serverAvinashBole quip-mcp-server index.ts setupToolHandlers command injection5.3 Medium
- jawherkl node-api-postgresJawherKl node-api-postgres user.js User.getAll sql injection6.9 Medium
- No product listedphpipam Section edit-result.php sql injection5.1 Medium
- codephiliax chat2dbCodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection5.3 Medium
- wavlink wl-wn578w2Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection9.3 Critical
- wavlink wl-wn579a3Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection9.3 Critical
- kasuganosoras pigeonPigeon has a Host Header Injection in email verification flow8.2 High
- python, python software foundation cpython +1 moretarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling2.0 Low
- itsourcecode cafe reservation systemitsourcecode Cafe Reservation System Registration signup.php sql injection6.9 Medium
- codegenieapp serverless-expressCodeGenieApp serverless-express Users Endpoint dynamodb.ts injection5.3 Medium
- itsourcecode online doctor appointment systemitsourcecode Online Doctor Appointment System doctor_action.php sql injection6.9 Medium
- itsourcecode online doctor appointment systemitsourcecode Online Doctor Appointment System patient_action.php sql injection6.9 Medium
- feminer wmsFeMiner wms Basic Organizational Structure depart_add_bg.php sql injection6.9 Medium
- autohomecorp frostmourneAutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection5.3 Medium
- tornadoweb tornadoTornado has incomplete validation of cookie attributes7.2 High
- xierongwkhd weimai-wetappxierongwkhd weimai-wetapp Endpoint HomeController.java getLikeMovieList sql injection5.1 Medium
- xierongwkhd weimai-wetappxierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection5.1 Medium
- elecv2 elecv2pelecV2P jsfile Endpoint wbjs.js runJSFile code injection5.3 Medium
- traefikTraefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values6.1 Medium
- angeljudesuarez university management systemitsourcecode University Management System att_add.php sql injection6.9 Medium
- h3c acg1000-ak230H3C ACG1000-AK230 aaa_portal_auth_local_submit command injection6.9 Medium
- budibaseBudibase Universal Auth Bypass via Webhook Query Param Injection9.1 Critical
- tiandy easy7 cms windows, easy7 cms +1 moreTiandy Easy7 CMS Windows GetDBData.jsp sql injection6.9 Medium
- opencc jflowopencc JFlow WF_CCForm.java Calculate injection5.3 Medium
- janobe resort reservation systemSourceCodester/janobe Resort Reservation System room_rates.php sql injection5.3 Medium
- comfast cf-ac100, cf-ac100 firmware +1 moreComfast CF-AC100 Request Path mbox-config sub_44AC14 command injection5.1 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System Search dashboard.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection5.3 Medium
- easycmsEasyCMS Request Parameter RbacuserAction.class.php sql injection5.3 Medium
- easycmsEasyCMS Request Parameter RbacnodeAction.class.php sql injection5.3 Medium
- janobe resort reservation systemSourceCodester/janobe Resort Reservation System accomodation.php sql injection5.3 Medium
- itsourcecode sanitize or validate this input, angeljudesuarez college management system +1 moreitsourcecode sanitize or validate this input teacher-attendance.php sql injection5.3 Medium
- angeljudesuarez university management systemitsourcecode University Management System att_single_view.php sql injection6.9 Medium
- angeljudesuarez university management systemitsourcecode University Management System view_result.php sql injection6.9 Medium
- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop adminHome.php sql injection6.9 Medium
- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop adminHome.php sql injection6.9 Medium
- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop pass sql injection6.9 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System check_item_details.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System POST check_customer_details.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System add_stock.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System add_sales_print.php sql injection5.3 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injection5.1 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injection5.1 Medium
- angeljudesuarez university management systemitsourcecode University Management System add_result.php sql injection6.9 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Login Login.php sql injection6.9 Medium
- carmelo student web portalcode-projects Student Web Portal profile.php sql injection5.3 Medium
- carmelo student web portalcode-projects Student Web Portal signup.php valreg_passwdation sql injection6.9 Medium
- Show moreLoading…