CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- tenda 4g300, 4g300 firmware +1 moreTenda 4G300 DelFil sub_425A28 command injection5.3 Medium
- sourcecodester pet grooming management softwareSourceCodester Pet Grooming Management Software update_customer.php sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection5.1 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection5.1 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection5.1 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection5.1 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection5.3 Medium
- No product listedEyouCMS common.php GetSortData sql injection6.9 Medium
- No product listedEyouCMS Template File FilemanagerLogic.php editFile code injection5.1 Medium
- eiliyaabedini aider-mcpeiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection6.9 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection5.1 Medium
- No product listedJeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection5.1 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection5.1 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System view_prod.php sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System index.php category sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection5.3 Medium
- code-projects coaching management systemcode-projects Coaching Management System POST reply.php sql injection5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection6.9 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php login sql injection6.9 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection6.9 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection6.9 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection6.9 Medium
- egtai gmx-vmd-mcpegtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection6.9 Medium
- dvladimirov mcpdvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection6.9 Medium
- dubydu sqlite-mcpdubydu sqlite-mcp entry.py extract_to_json sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- codeastro online classroomCodeAstro Online Classroom guestdetails sql injection5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- tenda hg3, hg3 firmware +1 moreTenda HG3 formTracert command injection8.7 High
- disler aider-mcp-serverdisler aider-mcp-server aider_ai_code server.py command injection6.9 Medium
- codeastro online classroomCodeAstro Online Classroom addnewfaculty sql injection5.3 Medium
- 1000 projects portfolio management system mca1000 Projects Portfolio Management System MCA block_status.php sql injection5.3 Medium
- code-projects online lot reservation systemcode-projects Online Lot Reservation System loginuser.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System cancel.php sql injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System approve.php sql injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System delete.php sql injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System edit.php sql injection5.3 Medium
- tenda f456, f456 firmware +1 moreTenda F456 httpd WriteFacMac FromWriteFacMac command injection5.3 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php sql injection6.9 Medium
- likeadmin-likeshop likeadmin phplikeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection5.1 Medium
- Show moreLoading…