CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects student details management systemcode-projects Student Details Management System index.php sql injection6.9 Medium
- froxlorFroxlor has an incomplete fix for CVE-2026-309328.6 High
- trendnet tew-432brp, tew-432brp firmware +1 moreTRENDnet TEW-432BRP formWPS command injection5.3 Medium
- trendnet tew-432brp, tew-432brp firmware +1 moreTRENDnet TEW-432BRP formSetRoute command injection5.3 Medium
- kovah linkaceLinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instances8.1 High
- itsourcecode courier management systemitsourcecode Courier Management System parcel_list.php sql injection5.3 Medium
- itsourcecode courier management systemitsourcecode Courier Management System manage_user.php sql injection6.9 Medium
- code-projects project management systemcode-projects Project Management System Login chk.php sql injection6.9 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System index.php sql injection6.9 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System trans.php sql injection6.9 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System index.php sql injection6.9 Medium
- thingsboardThingsBoard YAML provision getGatewayDockerComposeFile code injection2.3 Low
- das parking management system 停车场管理系统Das Parking Management System 停车场管理系统 Search API Endpoint sql injection6.9 Medium
- das parking management system 停车场管理系统Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injection6.9 Medium
- shenzhen sixun software sixun shanghui group business management systemShenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection6.9 Medium
- codeastro leave management systemCodeAstro Leave Management System add_staff.php sql injection5.3 Medium
- itsourcecode electronic judging systemitsourcecode Electronic Judging System delete_judge.php sql injection6.9 Medium
- itsourcecode electronic judging systemitsourcecode Electronic Judging System edit_team.php sql injection6.9 Medium
- itsourcecode electronic judging systemitsourcecode Electronic Judging System edit_judge.php sql injection6.9 Medium
- xianrendzw easyreportxianrendzw EasyReport REST Endpoint execute sql injection5.3 Medium
- acrel electrical eems enterprise power operation and maintenance cloud platformAcrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection6.9 Medium
- yashpokharna2555 studentmanagementsystemyashpokharna2555 StudentManagementSystem studentdel.php confirm_logged_in sql injection6.9 Medium
- yashpokharna2555 studentmanagementsystemyashpokharna2555 StudentManagementSystem student_trans.php confirm_logged_in sql injection6.9 Medium
- yashpokharna2555 studentmanagementsystemyashpokharna2555 StudentManagementSystem success.php sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection6.9 Medium
- founddream miniclawdFoundDream miniclawd SkillsLoader skills-loader.ts which command injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System applyleaveprocess.php sql injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System psubmit.php sql injection5.3 Medium
- code-projects employee management systemcode-projects Employee Management System changepassemp.php sql injection5.3 Medium
- sourcecodester simple pos and inventory systemSourceCodester Simple POS and Inventory System search.php sql injection6.9 Medium
- sourcecodester simple pos and inventory systemSourceCodester Simple POS and Inventory System edit_customer.php sql injection5.1 Medium
- sourcecodester simple pos and inventory systemSourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection5.1 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formiNICbasic command injection5.3 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formAccept command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD stainfo command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request mp command injection5.1 Medium
- No product listedKLiK SocialMediaWebsite HTTP POST Request Parameter injection6.9 Medium
- No product listedKLiK SocialMediaWebsite HTTP GET Request Parameter injection5.3 Medium
- sourcecodester indian invoicing systemSourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formWlanMP command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formUSBStorage command injection5.3 Medium
- itsourcecode electronic judging systemitsourcecode Electronic Judging System login.php sql injection6.9 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formWpsStart command injection5.3 Medium
- edimax br-6675ndEdimax BR-6675nD POST Request formHwSet command injection5.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent prompt_builder.py _scan_context_content injection6.9 Medium
- projectworlds online art gallery shopprojectworlds Online Art Gallery Shop adminHome.php sql injection6.9 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formEZCHNwlanSetu formEZCHNwlanSetup command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn Setting formConnectionSetting command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formAccep formAccept command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn POST Request formHwSet command injection5.3 Medium
- Show moreLoading…