CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode hospital management systemitsourcecode Hospital Management System patient.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System medicine.php sql injection5.3 Medium
- emarket-design request a quote – quote forms for any wordpress siteRequest a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter7.5 High
- itsourcecode hospital management systemitsourcecode Hospital Management System patientchangepassword.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System patientdetail.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System insertbillingrecord.php sql injection5.3 Medium
- weng-xianhu eyoucmsweng-xianhu EyouCMS API index.php sql injection5.1 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview3.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_class1.php sql injection6.9 Medium
- code-projects real state servicescode-projects Real State Services single-list_sale.php add sql injection6.9 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php add sql injection6.9 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php edit sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System editBaptism.php sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System delbaptism.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctortimings.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorprofile.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorchangepassword.php sql injection5.3 Medium
- wavlink wl-nu516u1-aWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection5.3 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System departmentDoctor.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System department.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentdetail.php sql injection5.3 Medium
- No product listedYzmCMS index.php sql injection6.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview4.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_class.php sql injection6.9 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview5.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentapproval.php sql injection5.3 Medium
- antlr antlr4antlr ANTLR4 gofmt GoTarget.java GoTarget command injection4.8 Medium
- antlr antlr4antlr ANTLR4 Grammar Action Block OutputFile.java code injection6.9 Medium
- yashpokharna2555 restaurent-management-systemyashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System appointment.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System ajaxmedicine.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System adminprofile.php sql injection5.1 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview7.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview6.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview.php sql injection6.9 Medium
- david-a-wheeler flawfinderFlawfinder output manipulation via untrusted filenames and source text8.7 High
- bitwarden serverBitwarden Server < 2026.5.0 JSON Injection via Webhook Templates2.3 Low
- grokability snipe-itSnipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API8.5 High
- python, python software foundation cpython +1 moreConfiguration Injection via Carriage Return (\r) in write() method4.1 Medium
- openidentityplatform openamOpenAM LDAP Injection via `_queryId` Parameter7.1 High
- thinkst canarytokensHTML injection in the Canarytoken Google Chat notification2.0 Low
- langflowlangflow-ai langflow Bundle URL Loader code injection4.8 Medium
- radware cyber controllerRadware Cyber Controller HTML Report Generation HTML injection5.1 Medium
- edimax br-6478ac v2Edimax BR-6478AC V2 POST Request mp command injection5.3 Medium
- edimax br-6478ac v2Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection5.3 Medium
- edimax br-6478ac v2Edimax BR-6478AC V2 POST Request stainfo command injection5.3 Medium
- edimax br-6478ac v2Edimax BR-6478AC V2 POST Request setWAN command injection5.3 Medium
- Show moreLoading…