CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode courier management systemitsourcecode Courier Management System edit_parcel.php sql injection6.9 Medium
- itsourcecode courier management systemitsourcecode Courier Management System edit_branch.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System locations.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System execute1.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System execute.php sql injection6.9 Medium
- codepanda source canteen management systemCodePanda Source canteen_management_system login.php sql injection6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System Login sql injection6.9 Medium
- d-link dir-822, dlink dir-822 firmware +1 moreD-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System Endpoint eprocess.php sql injection6.9 Medium
- liyupi yu-pictureliyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection6.9 Medium
- 666ghj mirofish666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection6.9 Medium
- baomidou dynamic-datasourcebaomidou dynamic-datasource StandardEvaluationContext/SpelExpressionParser DsSpelExpressionProcessor.java DsSpelExpressionProcessor#doDetermineDatasource injection5.3 Medium
- tufantunc ssh-mcptufantunc ssh-mcp index.ts shell.write command injection8.5 High
- codeastro online job portalCodeAstro Online Job Portal All Jobs delete-jobs.php sql injection5.1 Medium
- bytedance coze-studio, coze studio +1 moreByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection5.3 Medium
- klik socialmediawebsiteKLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection6.9 Medium
- No product listedEnvoy Query Parameter header_mutation.cc params.add injection5.3 Medium
- colinhacks zodcolinhacks Zod CUID Data Type regexes.ts sql injection5.3 Medium
- tenda f453, f453 firmware +1 moreTenda F453 Telnet Service telnet TendaTelnet command injection5.3 Medium
- sipeed picoclawPicoClaw Web Launcher Management Plane restart command injection6.9 Medium
- star7th showdocstar7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection5.3 Medium
- divyanshu-hash gitpilot-mcpDivyanshu-hash GitPilot-MCP main.py repo_path command injection6.9 Medium
- No product listedJiZhiCMS addcache.html htmlspecialchars_decode sql injection5.1 Medium
- locize i18next-locize-backendPath traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backend6.5 Medium
- i18next i18next-http-backendi18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns6.5 Medium
- comfast cf-n1-sComfast CF-N1-S Endpoint mbox-config command injection5.3 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreUser‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups6.5 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreHTML Injection possible in system generated emails in Fortra's GoAnywhere MFT5.4 Medium
- metasoft 美特软件 metacrmMetasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection6.9 Medium
- phili67 ecclesia crmphili67 Ecclesia CRM Query Viewer view ValidateInput sql injection5.3 Medium
- modelscope agentscopemodelscope agentscope _python.py execute_shell_command code injection6.9 Medium
- langflow-ai langflowlangflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection5.3 Medium
- projectsandprograms school management systemProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection6.9 Medium
- liangliangyy djangoblogliangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection5.3 Medium
- dameng100 muucmfdameng100 muucmf index.html getListByPage sql injection6.9 Medium
- jstedfast mailkitMailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade6.5 Medium
- querymine smsQueryMine sms GET Request Parameter deletecourse.php sql injection6.9 Medium
- querymine smsQueryMine sms GET Request Parameter editcourse.php sql injection5.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields5.3 Medium
- 1panel-dev maxkbMaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing3.1 Low
- aandrew-me ytdownloaderaandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection4.8 Medium
- code-projects easy blog sitecode-projects Easy Blog Site post.php sql injection5.3 Medium
- phpgurukul daily expense tracking systemPHPGurukul Daily Expense Tracking System register.php sql injection6.9 Medium
- itsourcecode construction management systemitsourcecode Construction Management System equipments.php sql injection5.3 Medium
- itsourcecode construction management systemitsourcecode Construction Management System employees.php sql injection5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- code-projects simple content management systemcode-projects Simple Content Management System index.php sql injection6.9 Medium
- code-projects simple content management systemcode-projects Simple Content Management System login.php sql injection6.9 Medium
- Show moreLoading…