CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- code-projects simple flight ticket booking systemcode-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection6.9 Medium
neovimDebianNeovim View Branch secure.lua M.read command injection4.8 Medium- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive1.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive2.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive3.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive4.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive5.php sql injection6.9 Medium
- chengdu everbrite network technology beikeshopChengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection5.3 Medium
- cyber-iii student-management-systemKushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection5.3 Medium
- jflyfox jfinal cmsjflyfox jfinal_cms AdvicefeedbackController.java list sql injection5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System index1.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System index2.php sql injection6.9 Medium
- erzhongxmu jeewmserzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection6.9 Medium
- chanjet crmChanjet CRM HTTP GET Request jxf_dump_systable.php sql injection6.9 Medium
- foundationagents metagptFoundationAgents MetaGPT common.py check_cmd_exists command injection2.3 Low
- tiobon employee self-service systemTiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection5.3 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection6.9 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection6.9 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 Path Normalization dlopen command injection6.9 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection5.3 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection5.1 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection5.3 Medium
- jinher oaJinher OA nextselectplan.aspx sql injection6.9 Medium
- jinher oaJinher OA GetFormSn.aspx sql injection5.3 Medium
- gl.inet mt3000GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection5.3 Medium
- code-projects hotel and tourism reservation systemcode-projects Hotel and Tourism Reservation System details.php sql injection6.9 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formUSSDSetup sub_41CF20 command injection5.3 Medium
- tittuvarghese collegemanagementsystemtittuvarghese CollegeManagementSystem fetch.php sql injection6.9 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formSmsManage sub_41C8E8 command injection5.3 Medium
- sourcecodester ship ferry ticket reservation systemSourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection6.9 Medium
- projectworlds online art gallery shop projectprojectworlds Online Art Gallery Shop Project adminHome.ph sql injection5.3 Medium
- projectworlds online art gallery shop projectprojectworlds Online Art Gallery Shop Project adminHome.php sql injection5.3 Medium
- microsoft copilot chat (microsoft edge), copilot chat +1 moreCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability6.5 Medium
- itsourcecode fees management systemitsourcecode Fees Management System receipt.php sql injection5.3 Medium
- itsourcecode fees management systemitsourcecode Fees Management System manage_user.php sql injection5.3 Medium
- itsourcecode fees management systemitsourcecode Fees Management System manage_student.php sql injection5.3 Medium
- jupyter enterprise gatewayJupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering10.0 Critical
- froxlorFroxlor: BIND Zone File Injection via TXT Record Content7.6 High
- thinkst canarytokensHTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens1.2 Low
- sourcecodester pizzafy e-commerce systemSourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection6.9 Medium
- ahujasid blender-mcpahujasid blender-mcp server.py execute_blender_code code injection5.1 Medium
- ahujasid blender-mcpahujasid blender-mcp server.py open injection5.3 Medium
- code-projects student admission systemcode-projects Student Admission System index.php sql injection6.9 Medium
- No product listedDedeCMS carbuyaction.php RemoveXSS sql injection6.9 Medium
- No product listedDedeCMS flink.php dede_htmlspecialchars sql injection6.9 Medium
- No product listedDedeCMS Feedback feedback.php TrimMsg sql injection6.9 Medium
- ditec a.s. d.launcher 2Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks6.5 Medium
- itsourcecode fees management systemitsourcecode Fees Management System manage_payment.php sql injection5.3 Medium
- elunez eladminelunez eladmin Application Deployment App.java command injection5.3 Medium
- itsourcecode fees management systemitsourcecode Fees Management System manage_fee.php sql injection5.3 Medium
- Show moreLoading…