CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- cudy tr1200Cudy TR1200 ipsec.lua action_ipsec_conn command injection5.1 Medium
- code-projects simple food ordering system, carmelo simple food order system +1 morecode-projects Simple Food Ordering System all-tickets.php sql injection5.3 Medium
- apconw aix-dbapconw Aix-DB terminology_retriever.py sql injection4.8 Medium
- deepwisdom metagptFoundation Agents MetaGPT DataInterpreter write_analysis_code.py injection5.3 Medium
- deepwisdom metagptFoundation Agents MetaGPT operator.py code_generate code injection5.3 Medium
- vanna-ai vannavanna-ai vanna base.py ask sql injection5.3 Medium
- vanna-ai vannavanna-ai vanna legacy exec injection5.3 Medium
- No product listedPbootCMS Member Login MemberController.php checkUsername sql injection6.9 Medium
- mindinventory mindsqlMindinventory MindSQL mindsql_core.py ask_db sql injection5.3 Medium
- mindinventory mindsqlMindinventory MindSQL mindsql_core.py ask_db code injection5.3 Medium
- h3js h3h3 before 1.15.9 Path Traversal via Double Decoding8.2 High
- eosphoros-ai db-gpteosphoros-ai db-gpt Incomplete Fix editor sql injection6.9 Medium
- bagofwords1 bagofwordsbagofwords1 bagofwords code_execution.py generate_df injection5.3 Medium
- itsourcecode college management systemitsourcecode College Management System search_student.php sql injection5.3 Medium
- itsourcecode online doctor appointment systemitsourcecode Online Doctor Appointment System appointment_action.php sql injection5.1 Medium
- adonesevangelista online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection5.3 Medium
- adonesevangelista online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection5.1 Medium
- adonesevangelista online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection5.1 Medium
- adonesevangelista online frozen foods ordering systemitsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection5.1 Medium
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- comfast cf-ac100Comfast CF-AC100 mbox-config command injection5.1 Medium
- openwrtOpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation1.8 Low
- dataease sqlbotSQLBot: Remote Code Execution via Terminology Poisoning8.6 High
- carmelo simple food order systemcode-projects Simple Food Order System add-item.php sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection6.9 Medium
- itsourcecode college management systemitsourcecode College Management System time-table.php sql injection5.3 Medium
- itsourcecode college management systemitsourcecode College Management System courses.php sql injection5.1 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection6.9 Medium
- itsourcecode online enrollment systemitsourcecode Online Enrollment System index.php sql injection6.9 Medium
- itsourcecode online enrollment systemitsourcecode Online Enrollment System login.php sql injection6.9 Medium
- siteserver sscmsSSCMS DDL SitesAddController.Submit.cs sql injection5.3 Medium
- tiandy integrated management platformTiandy Integrated Management Platform getAuthorityByUserId sql injection6.9 Medium
- vanna-ai vannavanna-ai vanna Endpoint __init__.py update_sql sql injection5.3 Medium
- vanna-ai vannavanna-ai vanna bigquery_vector.py remove_training_data sql injection6.9 Medium
- lb-link bl-wr9000, bl-wr9000 firmware +1 moreLB-LINK BL-WR9000 set_wifi sub_458754 command injection5.3 Medium
- angeljudesuarez payroll management systemitsourcecode Payroll Management System manage_employee.php sql injection6.9 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection5.3 Medium
- bazinga012 mcp code executorbazinga012 mcp_code_executor index.ts installDependencies command injection4.8 Medium
- hypermodel-labs mcp-server-auto-commithypermodel-labs mcp-server-auto-commit index.ts getGitChanges command injection4.8 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection5.3 Medium
- d-link dnr-202l, dnr-322l, dnr-326 +37 more +39 moreD-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection5.3 Medium
- Show moreLoading…