CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- rabindralamsal inventory-management-systemRizwan17 inventory-management-system manage.php update_record sql injection6.9 Medium
- unknown contact form 7 captchaContact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation6.5 Medium
- unknown hustleHustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders4.8 Medium
- unknown cleantalkSpam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text6.5 Medium
- google chromeInjection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had...8.3 High
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System us_edit.php sql injection5.3 Medium
- microsoft sql server management studio 22, sql server management studio +1 moreMicrosoft SQL Server Elevation of Privilege Vulnerability9.6 Critical
- aircheng-org iwebshop-5aircheng-org iWebShop-5 member.php member_list sql injection5.1 Medium
- code-projects student crud operationcode-projects Student Crud Operation edit.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_edit1.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pro_searchfrm.php sql injection5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System delete_subject.php sql injection6.9 Medium
- d-link dir-895lD-Link DIR-895L udhcpcd serverpacket.c sendACK command injection6.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System us_edit1.php sql injection5.3 Medium
- itsourcecode online voting systemSourceCodester Online Voting System ajax.php save_category sql injection6.9 Medium
- jaychouchannel tourism-management-systemjaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection6.9 Medium
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Node-RED nodered_lib_apply command injection9.4 Critical
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection9.4 Critical
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System settings_edit.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_edit1.php sql injection5.3 Medium
- itsourcecode school management systemitsourcecode School Management System User_Login.php sql injection6.9 Medium
- itsourcecode information system society membership systemitsourcecode Information System Society Membership System check_student.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System us_transac.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_transac.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pro_transac.php add sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pos_transac.php add sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_transac.php add sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System us_del.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_del.php sql injection5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection6.9 Medium
- mstfakts college-management-systemMstfakts College-Management-System Search university.php mysqli_query sql injection6.9 Medium
- h3js h3h3 before 1.15.9 SSE Event Injection via Carriage Return6.9 Medium
- rabindralamsal inventory-management-systemrabindralamsal inventory-management-system Login index.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System delete_user_account.php sql injection6.9 Medium
- unknown ninja formsNinja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge Tags4.8 Medium
- themeisle redirection for contact form 7Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags4.8 Medium
- jetmonsters jetformbuilderJetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter6.5 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System delete_user.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System delete_teacher.php sql injection6.9 Medium
- code-projects task management system in phpcode-projects Task Management System In PHP Login index.php sql injection6.9 Medium
- churchcrm crmDefaultFuction CRM delete.php sql injection5.3 Medium
- churchcrm crmDefaultFuction CRM delete.php sql injection5.3 Medium
- churchcrm crmDefaultFuction CRM edit.php sql injection5.3 Medium
- code-projects content management systemcode-projects Content Management System login.php sql injection6.9 Medium
- Show moreLoading…