CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- uptrain-ai uptrainUptrain vulnerable to remote code execution via `/add_prompts` endpoint7.4 High
- uptrain-ai uptrainUpTrain vulnerable to Remote code execution at `/create_project`7.4 High
- itsourcecode hospital management systemitsourcecode Hospital Management System viewprescriptionrecord.php sql injection5.3 Medium
- alaev seo tools extensionAlaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting5.3 Medium
- belkin ax1800, gl.inet a1300, axt1800 +14 more +16 moreGL.iNet XE3000 Language Update ui.update_langs code injection5.3 Medium
- comfast cf-n1-sCOMFAST CF-N1-S mbox-config sub_44A968 command injection5.1 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewpaymentreport.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewpatient.php sql injection5.3 Medium
- jij-inc jij-mcp-serverJij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection5.1 Medium
- edimax ew-7478apcEdimax EW-7478APC stainfo command injection5.3 Medium
- edimax ew-7478apcEdimax EW-7478APC setWAN command injection5.3 Medium
- edimax ew-7478apcEdimax EW-7478APC formWlbasic command injection5.3 Medium
- iatsiuk pptr-mcpiatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System vieworder.php sql injection5.3 Medium
- wcproducttable product table & list builder for woocommerceProduct Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter5.3 Medium
- defaultfuction notice-system-managentDefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection5.3 Medium
- dolibarrDolibarr User Cloning card.php ldap injection5.3 Medium
- No product listedEvergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection6.9 Medium
- sourcecodester stock management systemSourceCodester Stock Management System Master.php delete_supplier sql injection5.1 Medium
- code-projects online shopping systemcode-projects Online Shopping System checkout_process.php sql injection5.3 Medium
- code-projects online shopping systemcode-projects Online Shopping System homeaction.php sql injection5.3 Medium
- code-projects online shopping systemcode-projects Online Shopping System action.php sql injection5.3 Medium
- code-projects online shopping systemcode-projects Online Shopping System Login login.php sql injection6.9 Medium
- code-projects online food order systemcode-projects Online Food Order System delete_food_items1.php sql injection5.3 Medium
- jinher oaJinher OA attendance_out_approve.aspx sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_teacher.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewmedicine.php sql injection5.3 Medium
- sourcecodester simple client management systemSourceCodester Simple Client Management System Master.php save_service sql injection6.9 Medium
- sourcecodester air cargo management systemSourceCodester Air Cargo Management System Master.php save_cargo_type sql injection5.1 Medium
- francoisjacquet rosariosisfrancoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewdoctortimings.php sql injection5.3 Medium
- raisecom communication command and dispatch management platformRaisecom Communication Command and Dispatch Management Platform getpwd.php sql injection6.9 Medium
- tenda ch10, ch7, ch7g +7 more +9 moreTenda CH7 ATE Module Kylin HandleCmd command injection9.3 Critical
- campcodes simple student information systemSourceCodester Simple Student Information System view_department.php sql injection6.9 Medium
- ibm security verify access, verify identity access, verify identity access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access7.2 High
- themeum kirkiKirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions6.5 Medium
- sourcecodester simple doctors appointment systemSourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection5.3 Medium
- mingsoft mcmsMingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection6.9 Medium
- lock-upme opmslock-upme OPMS IN Clause message.go sql injection5.3 Medium
- dresende node-sql-querydresende node-sql-query Request Parameter Select.js SelectQuery.build sql injection6.9 Medium
- shenzhen aitemi m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection9.3 Critical
- itsourcecode hospital management systemitsourcecode Hospital Management System viewdoctor.php sql injection5.3 Medium
- tenda ch22Tenda CH22 CertListInfo formCertListInfo command injection8.7 High
- code-projects task management systemcode-projects Task Management System comment_count_user.php sql injection6.9 Medium
- code-projects task management systemcode-projects Task Management System AdminLogin.php sql injection6.9 Medium
- nighttrek ollama-mcpNightTrek Ollama-mcp index.ts command injection4.8 Medium
- nighttrek supabase-mcpNightTrek Supabase-MCP generate_types command injection4.8 Medium
- nellyw8 mcp4edaNellyW8 MCP4EDA run_openlane/view_waveform command injection4.8 Medium
- andreahaku codex mcpandreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection4.8 Medium
- Show moreLoading…