CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- shenzhen ruiming technology streamax crocusShenzhen Ruiming Technology Streamax Crocus OperateStatistic.do sql injection6.9 Medium
- mingsoft mcmsmingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection5.3 Medium
- spring ai, vmware spring ai +1 moreSpring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters7.5 High
- shenzhen ruiming technology streamax crocusShenzhen Ruiming Technology Streamax Crocus Endpoint RemoteFormat.do sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modstaffinfo.php sql injection6.9 Medium
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass6.3 Medium
- tandoor recipesURL Parameter Injection in FDC Food Search API Causes Server Crash and Exposes Internal API Key6.5 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter checkregisitem.php sql injection6.9 Medium
- code-projects online food ordering systemcode-projects Online Food Ordering System Admin Login admin.php sql injection6.9 Medium
- itsourcecode online enrollment systemitsourcecode Online Enrollment System Parameter index.php sql injection6.9 Medium
- code-projects online food ordering systemcode-projects Online Food Ordering System Shopping Cart cart.php sql injection6.9 Medium
- code-projects food ordering systemSourceCodester Food Ordering System Parameter purchase.php sql injection6.9 Medium
- sourcecodester malawi online marketSourceCodester Malawi Online Market display.php sql injection6.9 Medium
- code-projects accounting systemcode-projects Accounting System delete.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injection5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter checkcheckout.php sql injection6.9 Medium
- itsourcecode college management systemitsourcecode College Management System Parameter add-single-student-results.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_purchase.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injection5.3 Medium
- froxlorFroxlor is vulnerable to BIND zone file injection via unsanitized DNS record content in DomainZones API8.6 High
- langflowLangflow GitHub Actions Shell Injection9.1 Critical
- itsourcecode online enrollment systemitsourcecode Online Enrollment System Parameter index.php sql injection6.9 Medium
- projectworlds online admission systemSourceCodester Online Admission System programmes.php sql injection6.9 Medium
- code-projects online library management systemSourceCodester Online Library Management System Parameter home.php sql injection6.9 Medium
- sourcecodester online catering reservationSourceCodester Online Catering Reservation search.php sql injection6.9 Medium
- itsourcecode sanitize or validate this inputitsourcecode sanitize or validate this input Parameter subjects.php sql injection5.3 Medium
- sourcecodester e-commerce siteSourceCodester E-Commerce Site products.php sql injection6.9 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System Parameter index.php sql injection6.9 Medium
- rubyonrails rails, rails activestorage +1 moreRails Active Storage has possible glob injection in its DiskService6.6 Medium
- 648540858 wvp-gb28181-pro648540858 wvp-GB28181-pro Stream Proxy Query StreamProxyProvider.java selectAll sql injection5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameters checklogin.php sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameters checkupdatestatus.php sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameters viewdetail.php sql injection6.9 Medium
- sourcecodester simple e-learning systemSourceCodester Simple E-learning System User Profile Update sql injection5.3 Medium
- sourcecodester simple e-learning systemSourceCodester Simple E-learning System HTTP GET Parameter delete_post.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP POST Request view_product.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection5.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection5.3 Medium
- yangzongzhuan ruoyiyangzongzhuan RuoYi Quartz Job job code injection5.1 Medium
- tenda f453, f453 firmware +1 moreTenda F453 WriteFacMac FormWriteFacMac privilege escalation5.3 Medium
- code-projects simple gym management systemcode-projects Simple Gym Management System func.php sql injection5.1 Medium
- wavlink wl-wn578w2, wl-wn578w2 firmware +1 moreWavlink WL-WN578W2 POST Request firewall.cgi command injection5.3 Medium
- projectworlds online notes sharing systemprojectworlds Online Notes Sharing System Parameters login.php sql injection6.9 Medium
- Show moreLoading…