CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode online enrollment systemitsourcecode Online Enrollment System Parameter index.php sql injection6.9 Medium
- defaultfuction content-management-system, content management system +1 moreDefaultFuction Content-Management-System tools.php command injection6.9 Medium
- shsuishang modulithshopshsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection5.3 Medium
- efforthye fast-filesystem-mcpefforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injection5.3 Medium
- alejandroarciniegas mcp-data-visAlejandroArciniegas mcp-data-vis MCP server.js request sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter delstaffinfo.php sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modify.php sql injection6.9 Medium
- itsourcecode payroll management systemitsourcecode Payroll Management System Parameter view_employee.php sql injection6.9 Medium
- itsourcecode payroll management systemitsourcecode Payroll Management System Parameter manage_user.php sql injection6.9 Medium
- code-projects simple gym management systemcode-projects Simple Gym Management System Payment sql injection5.3 Medium
- code-projects student membership systemcode-projects Student Membership System Admin Login index.php sql injection6.9 Medium
- code-projects student membership systemcode-projects Student Membership System delete_user.php sql injection5.3 Medium
- code-projects student membership systemcode-projects Student Membership System delete_member.php sql injection5.3 Medium
- code-projects student membership systemcode-projects Student Membership System User Registration sql injection6.9 Medium
- trendnet tew-713re, tew-713re firmware +1 moreTRENDnet TEW-713RE setSysAdm command injection5.3 Medium
- trendnet tew-713re, tew-713re firmware +1 moreTRENDnet TEW-713RE addRouting sub_421494 command injection5.3 Medium
- sourcecodester teacher record systemSourceCodester Teacher Record System Parameter sql injection6.9 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System ajax.php sql injection6.9 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System login.php sql injection6.9 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setIptvCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setWiFiBasicCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setSyslogCfg command injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 WriteFacMac FormWriteFacMac command injection5.3 Medium
- code-projects accounting systemcode-projects Accounting System Parameter viewin_costumer.php sql injection6.9 Medium
- yunaiv yudao-cloudYunaiV yudao-cloud page sql injection5.1 Medium
- yunaiv yudao-cloudYunaiV yudao-cloud get-by-website sql injection6.9 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setStaticRoute command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R cstecgi.cgi setUPnPCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTotolink A3300R Parameter cstecgi.cgi setLanCfg command injection5.3 Medium
- code-projects chamber of commerce membership management systemcode-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection5.1 Medium
- code-projects accounting systemcode-projects Accounting System Parameter view_work.php sql injection6.9 Medium
- code-projects accounting systemcode-projects Accounting System Parameter edit_costumer.php sql injection6.9 Medium
- code-projects accounting systemcode-projects Accounting System Parameter view_costumer.php sql injection6.9 Medium
- totolink nr1800x, nr1800x firmware +1 moreTotolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection5.3 Medium
- totolink a3600r, a3600r firmware +1 moreTotolink A3600R Parameter cstecgi.cgi setNoticeCfg command injection5.3 Medium
- carmelo simple food order systemcode-projects Simple Food Order System Parameter all-orders.php sql injection6.9 Medium
- carmelo simple food order systemcode-projects Simple Food Order System Parameter register-router.php sql injection6.9 Medium
- carmelo simple food order systemcode-projects Simple Food Order System Parameter all-tickets.php sql injection6.9 Medium
- elecv2 elecv2pelecV2 elecV2P JSON webhook runJSFile code injection5.3 Medium
- promtengineer localgptPromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection6.9 Medium
- sinaptik ai pandasaiSinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection6.9 Medium
- sinaptik ai pandasaiSinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection6.9 Medium
aws/aws-sdk-phpPackagistAWS SDK for PHP has CloudFront Policy Document Injection via Special Characters7.7 High- nektos actact: Unrestricted set-env and add-path command processing enables environment injection7.7 High
- code-projects social networking sitecode-projects Social Networking Site Endpoint delete_photos.php sql injection5.3 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection5.3 Medium
- huggingface smolagentshuggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection5.3 Medium
- shenzhen ruiming technology streamax crocusShenzhen Ruiming Technology Streamax Crocus Parameter DevicePrint.do sql injection6.9 Medium
- Show moreLoading…