CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- totolink nr1800xTOTOLINK NR1800X cstecgi.cgi setUssd command injection5.3 Medium
- d-link dir-825mD-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_searchfrm.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_edit.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_searchfrm.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pro_edit.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_searchfrm.php sql injection5.3 Medium
- code-projects student information systemPHPGurukul Student Information System student_edit1.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_del.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_edit.php sql injection5.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters6.5 Medium
- roocodeinc roo-codeRooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection5.1 Medium
- roocodeinc roo-codeRooCodeInc Roo-Code README File ExecaTerminalProcess code injection5.3 Medium
- roocodeinc roo-codeRooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection5.1 Medium
- mongodb rust driverCross-database write redirection via unvalidated dotted database name in bulk write namespaces7.1 High
- mongodb libmongocryptCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt2.0 Low
- themeum tutor lmsTutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing9.8 Critical
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php login2 sql injection6.9 Medium
- pleskImproper neutralization of special elements in Plesk allows remote authenticated users to...9.9 Critical
- google cloud bigquery data transfer serviceRemote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection9.4 Critical
- totolink n600rTOTOLINK N600R cstecgi.cgi getCurrentTime command injection6.9 Medium
- code-projects simple inventory systemcode-projects Simple Inventory System edit.php sql injection6.9 Medium
- code-projects food ordering systemSililaWijesinghe Food Ordering System search.php sql injection6.9 Medium
- google chromeInjection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially...6.5 Medium
- google chromeInjection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...4.3 Medium
- liketrek trekliketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_del.php sql injection5.3 Medium
- fdawgs node-popplerFdawgs node-poppler Argument Injection index.js pdfUnite argument injection6.9 Medium
- apache camelApache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 High
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection6.9 Medium
- bigprof online clinic management systemitsourcecode Online Clinic Management System Admin Login login.php sql injection6.9 Medium
- codeastro real estate management systemitsourcecode Real Estate Management System search.php sql injection6.9 Medium
- codeastro payroll systemitsourcecode Payroll System admin_class.php login sql injection6.9 Medium
- itsourcecode library management systemitsourcecode Library Management System editbooks.php sql injection5.3 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System view_prod.php sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection6.9 Medium
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_user sql injection6.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_edit.php sql injection5.3 Medium
- shenzhen gongji technology xbrother dynamic environment monitoring systemShenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection6.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System processlogin.php sql injection6.9 Medium
- provectus kafka-uiprovectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection5.3 Medium
- code-projects barangay resident profiling management systemcode-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection6.9 Medium
- tenda ch22Tenda CH22 exeCommand formexeCommand command injection5.3 Medium
- itsourcecode hospital management system project in phpitsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection5.3 Medium
- tenda ch22Tenda CH22 editFileName formeditFileName command injection5.3 Medium
- cyber-iii student-management-systemsambitraj Student-Management-System Management Mutation sql injection5.3 Medium
- cyber-iii student-management-systemsambitraj Student-Management-System Dashboard sql injection5.3 Medium
- trendnet tew-823druTRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection5.1 Medium
- Show moreLoading…