CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode courier management systemitsourcecode Courier Management System print_pdets.php sql injection5.3 Medium
- 54yyyu code-mcp54yyyu code-mcp MCP Tool server.py git_operation command injection6.9 Medium
- codecanyon perfex crmCodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection5.3 Medium
- sourcecodester web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection5.3 Medium
- codeastro online classroomCodeAstro Online Classroom facultydetails sql injection5.3 Medium
- codeastro online classroomCodeAstro Online Classroom addnewstudent sql injection5.3 Medium
- codeastro online classroomCodeAstro Online Classroom studentdetails sql injection5.3 Medium
- codeastro online classroomCodeAstro Online Classroom facultylogin sql injection5.3 Medium
- codeastro online classroomCodeAstro Online Classroom studentlogin sql injection5.3 Medium
- code-projects bloodbank managing systemcode-projects BloodBank Managing System get_state.php sql injection5.3 Medium
- shandong hoteam software pdm product data management systemShandong Hoteam Software PDM Product Data Management System DataService GetQueryMachineGridOnePageData sql injection6.9 Medium
- prefecthq prefectPrefectHQ prefect GitRepository Pull storage.py argument injection5.3 Medium
- totolink wa300Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection5.3 Medium
- totolink wa300Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection5.3 Medium
- totolink wa300Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection5.3 Medium
- code-projects gym management system in php, windows nt +1 morecode-projects Gym Management System In PHP/Windows NT index.php sql injection5.3 Medium
- jd cloud jdcosJD Cloud JDCOS Service jdcap set_iptv_info command injection5.3 Medium
- av stumpfl pixera two media serverAV Stumpfl Pixera Two Media Server Websocket API code injection6.9 Medium
- langflow-ai langflowlangflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection5.3 Medium
- dromara maxkeyDromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection5.3 Medium
- amtt hotel broadband operation systemAMTT Hotel Broadband Operation System cardhand_submit.php sql injection5.1 Medium
- acrel electrical eems enterprise power operation and maintenance cloud platformAcrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection6.9 Medium
- acrel electrical ecems enterprise microgrid energy efficiency management systemAcrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection6.9 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi ping_ddns command injection5.3 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection5.3 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi set_sys_adm command injection5.3 Medium
- dolibarr erp crmDolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection2.3 Low
- langflow-ai langflowlangflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection5.3 Medium
- edimax br-6428ncEdimax BR-6428nC Web setWAN command injection5.3 Medium
- edimax br-6208acEdimax BR-6208AC L2TP Mode setWAN command injection5.3 Medium
- yunaiv yudao-cloudYunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection5.3 Medium
- youlaitech youlai-bootyoulaitech youlai-boot Users Endpoint UserController.java getUserList sql injection5.3 Medium
- jinher oaJinher OA UserSel.aspx sql injection6.9 Medium
- sgl-project sglangsgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection6.3 Medium
- code-projects online hospital management systemcode-projects Online Hospital Management System viewappointment.php sql injection6.9 Medium
- kleneway awesome-cursor-mpc-serverkleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection5.3 Medium
- crazyrabbitltc mcp-code-review-servercrazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection5.3 Medium
- itsourcecode courier management systemitsourcecode Courier Management System edit_user.php sql injection5.1 Medium
- nextlevelbuilder ui-ux-pro-max-skillnextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection5.3 Medium
- itsourcecode courier management systemitsourcecode Courier Management System edit_staff.php sql injection6.9 Medium
- timbroddin astro-mcp-serverTimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injection5.3 Medium
libimage-exiftool-perlDebian,perl-Image-ExifToolopenEuler +1 moreExiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection4.8 Medium- itsourcecode electronic judging systemitsourcecode Electronic Judging System login.php sql injection6.9 Medium
- code-projects gym management systemcode-projects Gym Management System edit_exercises.php sql injection5.1 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection6.9 Medium
- totolink nr1800xTotolink NR1800X cstecgi.cgi sub_41A68C command injection8.7 High
- sourcecodester advanced school management systemSourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection6.9 Medium
- bootstrap cmsBootstrap CMS Page Creation show.blade.php code injection5.3 Medium
- sourcecodester hotel management systemSourceCodester Hotel Management System check sql injection6.9 Medium
- Show moreLoading…