CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode fees management systemitsourcecode Fees Management System manage_course.php sql injection5.3 Medium
- itsourcecode fees management systemitsourcecode Fees Management System ajax.php sql injection5.3 Medium
- code-projects hotel and tourism reservation systemcode-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection6.9 Medium
- codeastro payroll systemCodeAstro Payroll System home_employee.php sql injection5.3 Medium
- ibm i access family, i access client solutions +1 moreIBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator8.8 High
- code-projects content management systemitsourcecode Content Management System edit_topic.php sql injection5.3 Medium
- sourcecodester computer repair shop management systemSourceCodester Computer Repair Shop Management System manage_product.php sql injection6.9 Medium
- code-projects real state servicescode-projects Real State Services Login loginuser.php sql injection6.9 Medium
- codeastro online job portalCodeAstro Online Job Portal application_status.php sql injection6.9 Medium
- codeastro online job portalCodeAstro Online Job Portal delete-jobs.php sql injection6.9 Medium
- code-projects content management systemitsourcecode Content Management System add_sub_topic.php sql injection5.3 Medium
- code-projects content management systemitsourcecode Content Management System update_ss_img.php sql injection5.3 Medium
- code-projects content management systemitsourcecode Content Management System save_comment.php sql injection5.3 Medium
- itsourcecode online house rental systemitsourcecode Online House Rental System manage_payment.php sql injection6.9 Medium
- itsourcecode online house rental systemitsourcecode Online House Rental System manage_tenant.php sql injection6.9 Medium
- itsourcecode online house rental systemitsourcecode Online House Rental System ajax.php login sql injection6.9 Medium
- itsourcecode online blood bank management systemitsourcecode Online Blood Bank Management System campsdetails.php sql injection6.9 Medium
- itsourcecode online blood bank management systemitsourcecode Online Blood Bank Management System viewrequest.php sql injection6.9 Medium
- sourcecodester pharmacy sales and inventory systemSourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection5.1 Medium
- code-projects content management systemitsourcecode Content Management System instructions.php sql injection5.3 Medium
- sourcecodester water billing management systemSourceCodester Water Billing Management System User Management manage_user sql injection5.1 Medium
- codeastro ingredients stock management systemCodeAstro Ingredients Stock Management System stock_manager.php sql injection5.3 Medium
- raisulislamg4 student management system by phpraisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injection6.9 Medium
- raisulislamg4 student management system by phpraisulislamg4 student_management_system_by_php delete.php sql injection6.9 Medium
- raisulislamg4 student management system by phpraisulislamg4 student_management_system_by_php Login login_check.php sql injection6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent memory_tool.py _scan_memory_content injection5.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent config.py _sanitize_env_lines injection6.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent run_agent.py _compress_context injection6.9 Medium
- nousresearch hermes-agentNousResearch hermes-agent skills_tool.py skill_view injection6.9 Medium
- astrbotdevs astrbotAstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection5.3 Medium
- code-projects online hospital management systemcode-projects Online Hospital Management System Appointment appointmentdetail.php sql injection5.3 Medium
- code-projects online hospital management systemcode-projects Online Hospital Management System login_1.php login_user sql injection6.9 Medium
- No product listedOFCMS JSON Query SysUserController.java query sql injection5.3 Medium
- No product listedOFCMS JSON Query SystemParamController.java query sql injection5.3 Medium
- No product listedOFCMS JSON Query SystemDictController.java query sql injection5.3 Medium
- No product listedOFCMS ComnController ComnController.java query sql injection5.3 Medium
- code-projects online hospital management systemcode-projects Online Hospital Management System patient.php sql injection6.9 Medium
- sourcecodester hospitals patient records management systemSourceCodester Hospitals Patient Records Management System Users.php save sql injection6.9 Medium
- sourcecodester hospitals patient records management systemSourceCodester Hospitals Patient Records Management System Users.php delete sql injection6.9 Medium
- trendnet tew-432brpTRENDnet TEW-432BRP formWlanSetup command injection5.3 Medium
- trendnet tew-432brpTRENDnet TEW-432BRP formSysCmd command injection5.3 Medium
- code-projects online music sitecode-projects Online Music Site AdminEditAlbum.php sql injection6.9 Medium
- aider-ai aiderAider-AI Aider Code Generation Workflow sql injection5.3 Medium
- aider-ai aiderAider-AI Aider Architect Mode auth.py editor_coder.run code injection5.3 Medium
- code-projects online music sitecode-projects Online Music Site AdminUpdateAlbum.php sql injection5.1 Medium
- code-projects visitor management systemcode-projects Visitor Management System phone_0.php sql injection5.3 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formWlbasic command injection5.3 Medium
- bdtask multi-store inventory management systemBdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection5.1 Medium
- edimax br-6478acEdimax BR-6478AC POST Request formStaDrvSetup command injection5.3 Medium
- cyber-iii student-management-systemsambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection6.9 Medium
- Show moreLoading…