CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- mauriciomilano coder-apiMauricioMilano coder-api Projects Endpoint projects.ts createProject command injection4.8 Medium
- andreahaku llm memory mcpandreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection4.8 Medium
- adolfosalasgomez3011 slidev-builder-mcpadolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection4.8 Medium
- mimiclab mcp-pdf-visionMIMICLab mcp-pdf-vision index.ts load_pdf command injection4.8 Medium
- abdullah1854 mcpgatewayabdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection5.3 Medium
- kirachon context-engineKirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection5.1 Medium
- inquirelab mcp-bridge-apiINQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injection6.9 Medium
- mawww kakouneKakoune has a Critical RCE via Autorestore Backup Filename Injection8.6 High
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection6.9 Medium
- sourcecodester photo share websiteSourceCodester Photo Share Website ajax.php signup sql injection6.9 Medium
- gitpython-developers gitpythonGitPython before 3.1.58 Config Injection via option-name8.7 High
- sourcecodester photo share websiteSourceCodester Photo Share Website ajax.php login sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewappointment.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewadmin.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System treatmentrecord.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System treatmentdetail.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System treatment.php sql injection5.3 Medium
- chiuwingyan housechiuwingyan house selectall.action sql injection6.9 Medium
- unknown ninja formsNinja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default4.8 Medium
- foundationagents metagptFoundationAgents MetaGPT code injection4.8 Medium
- foundationagents metagptFoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection4.8 Medium
- noctedefensor ludusmcpNocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection4.8 Medium
- rrrene htmlsanitizeex, html sanitize ex +1 moreCSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input2.3 Low
- noctedefensor ludusmcpNocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection4.8 Medium
- coding-solo godot-mcpLeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injection4.8 Medium
- missionsquad mcp-apiMissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection5.3 Medium
- kino-kafkaesque ssh-mcp-serverKino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection4.8 Medium
- openhandsOpenHands send_pull_request.py initialize_repo command injection5.3 Medium
- sourcecodester computer repair shop management systemSourceCodester Computer Repair Shop Management System Master.php delete_product sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System servicetype.php sql injection5.3 Medium
- wso2 api control plane, api manager, identity server +5 more +7 moreHeader Injection via Custom URL Configuration in Multiple WSO2 Products Allows Open Redirect and Log Forgery5.4 Medium
- nearai ironclawnearai ironclaw shell.rs classify_command_risk command injection5.3 Medium
- rongzhitong visual integrated command and dispatch platformRongzhitong Visual Integrated Command and Dispatch Platform findAll sql injection6.9 Medium
- @clerk nuxtNuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props8.1 High
- cyber-iii student-management-systemimranrisal-dev Student-Management-System Login loginCheckTest.php sql injection6.9 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Security Hardening Release9.8 Critical
- h3c nx15H3C NX15 esps repeaterproc command injection8.6 High
- lavkush-maurya student-registration-systemlavkush-maurya Student-Registration-System changepass.php sql injection5.3 Medium
- esafenet cdgESAFENET CDG usbkey;logindojojs sql injection6.9 Medium
- shandong hoteam pdm product data management systemShandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injection6.9 Medium
- h3c nx15H3C NX15 esps reload.reload_config command injection8.6 High
- h3c nx15H3C NX15 esps delete command injection8.6 High
- h3c nx15H3C NX15 esps esps.ipv6.wan command injection8.6 High
- h3c nx15H3C NX15 esps add command injection8.6 High
- belkin ax1800GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection8.7 High
- vibesurf-ai vibesurfvibesurf-ai VibeSurf Python Validation code code injection6.9 Medium
- chetans9 core-php-admin-panelchetans9 core-php-admin-panel customers.php sql injection5.3 Medium
- cemtan sar2htmlcemtan sar2html Search sar2html.py sql injection5.3 Medium
- gl.inet gl-mt3000GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection9.3 Critical
- gl.inet gl-mt3000GL.iNet GL-MT3000 modem.so glc set_upgrade command injection9.3 Critical
- Show moreLoading…