CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- trendnet tew-821dapTRENDnet TEW-821DAP ssi upload.cgi command injection5.3 Medium
- profilepress membership team profilepressProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name6.5 Medium
- spring micrometerMicrometer StatsD and Logging meter registries line-protocol and log injection vulnerability5.9 Medium
- comfast cf-n1-sComfast CF-N1-S mbox-config system command injection9.4 Critical
- sourcecodester dynamic input field generator using html, css, and phpSourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection5.3 Medium
- coderCoder before 2.34.2 Stored HTML Injection via Appearance Settings4.8 Medium
- tenda ch22Tenda CH22 formcreateFileName command injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewappointmentpending.php sql injection5.3 Medium
- codeastro apartment visitor management systemCodeAstro Apartment Visitor Management System password-recovery.php sql injection6.9 Medium
- codeastro apartment visitor management systemCodeAstro Apartment Visitor Management System forgotpw.php sql injection6.9 Medium
- comfast cf-n1-sComfast CF-N1-S mbox-config sprintf command injection5.3 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_category sql injection5.3 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System view_order.php sql injection6.9 Medium
- greydgl pentestgptGreyDGL PentestGPT Web-Page Crawling injection2.3 Low
- cole aiosmtplibaiosmtplib: STARTTLS response injection5.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewappointmentapproved.php sql injection5.3 Medium
- code-projects simple inventory systemcode-projects Simple Inventory System delete.php sql injection6.9 Medium
- amirsanni mini-inventory-and-sales-management-systemamirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection5.3 Medium
- No product listedDeDeCMS advancedsearch.php sql injection6.9 Medium
- code-projects employee management systemcode-projects Employee Management System Admin Login Endpoint aprocess.php sql injection6.9 Medium
- code-projects assessment managementcode-projects Assessment Management welcome.php sql injection6.9 Medium
- chenhg5 cc-connectchenhg5 cc-connect webhook.go authenticate code injection6.9 Medium
- trendnet tew-755apTRENDnet TEW-755AP ssi email.cgi log_email_server command injection5.3 Medium
- splunk soarStructured Query Language (SQL) Injection through Custom Lists in Splunk SOAR6.5 Medium
- trendnet tv-ip751wicTRENDnet TV-IP751WIC alphapd set_time.cgi command injection5.3 Medium
- trendnet tew-821dapTRENDnet TEW-821DAP ssi ping.cgi system command injection5.3 Medium
- code-projects hospital information systemcode-projects Hospital Information System User Login UsersController.php login sql injection6.9 Medium
- cisco secure workloadCisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities9.9 Critical
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php login sql injection6.9 Medium
- code-projects online job portal systemcode-projects Online Job Portal System Password Recovery ForPass.php sql injection6.9 Medium
- asus routerTRENDnet Router ping.cgi command injection5.3 Medium
- trendnet tew-823druTRENDnet TEW-823DRU admin.cgi command injection5.3 Medium
- froxlorFroxlor DomainZones.add allows DNS zone-file RR injection via record/type fields5.4 Medium
meshcentralnpmMeshCentral has unsanitized data fields8.3 High- xianrendzw easyreportxianrendzw EasyReport Move Operations ModuleController.java sql injection5.3 Medium
- foremForem: Stored XSS in Admin Abuse Report Rendering6.3 Medium
- code-projects task management systemcode-projects Task Management System Login Form index.php select_with_multiple_condition sql injection6.9 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System check_availability.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewbilling.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewdepartment.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System viewroom.php sql injection5.3 Medium
- webkul bagistoWebkul Bagisto Customer-Registration Notification Email register cross site scripting5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_subject1.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_subject2.php sql injection6.9 Medium
- sourcecodester pet grooming management softwareSourceCodester Pet Grooming Management Software get_barcode_data.php sql injection6.9 Medium
- kylecui netforensicmcpkylecui NetForensicMCP index.js execAsync command injection5.3 Medium
- uptrain-ai uptrainUptrain vulnerable to remote code execution via `/new_run` endpoint7.4 High
- Show moreLoading…