CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- sourcecodester inventory and monitoring systemSourceCodester Inventory and Monitoring System index.php sql injection6.9 Medium
- functional software, inc. sentry seerSentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment9.8 Critical
- code-projects matrimonial systemcode-projects Matrimonial System Regular Search search.php sql injection6.9 Medium
- jenkins project gradle pluginJenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the...5.4 Medium
- codeastro leave management systemitsourcecode Leave Management System index.php sql injection5.3 Medium
- unknown formidable formsFormidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token4.8 Medium
- gedelumbung hospitalmanagementgedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injection5.1 Medium
- a2ui-project a2uia2ui-project a2ui Angular Renderer server-to-client.ts z.any injection5.1 Medium
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access6.5 Medium
- ibm mqIBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection9.8 Critical
- ibm mqIBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution8.1 High
- gitoxidelabs gitoxidegitoxide gix-transport before 0.59.2 CR/LF/NUL Injection5.3 Medium
- No product listedWuzhiCMS index.php getDataOfJson sql injection6.9 Medium
- sourcecodester online faculty clearance systemSourceCodester Online Faculty Clearance System delete_faculty1.php sql injection6.9 Medium
- d-link dsl-3782D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection5.3 Medium
- zyx0814 filepresszyx0814 FilePress Publish search.php sql injection6.9 Medium
- sourcecodester online faculty clearance systemSourceCodester Online Faculty Clearance System update_requirement_status.php sql injection6.9 Medium
- sourcecodester online faculty clearance systemSourceCodester Online Faculty Clearance System delete_requirement.php sql injection6.9 Medium
- katojkalemba online food ordering systemSourceCodester/katojkalemba Online Food Ordering System order.php sql injection6.9 Medium
- katojkalemba online food ordering systemSourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection6.9 Medium
- sourcecodester college notes gallery management systemSourceCodester College Notes Gallery Management System login.php sql injection6.9 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System forgot-password.php sql injection6.9 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System Login index.php sql injection6.9 Medium
- codeastro blood donor management systemPHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection6.9 Medium
- hkuds nanobotHKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection6.9 Medium
- subhajitkhan online-clinic-management-systemsubhajitkhan online-clinic-management-system doctorlogin.php sql injection6.9 Medium
- codeastro leave management systemitsourcecode Leave Management System index.php sql injection5.3 Medium
- codeastro leave management systemitsourcecode Leave Management System login.php sql injection6.9 Medium
- statamic cmsYot CMS Admin Console admin.php eval code injection5.1 Medium
- statamic cmsYot CMS Cookie global.php login sql injection6.9 Medium
- d-link dwr-m921D-Link DWR-M921 formDiskPartition system command injection5.1 Medium
- subhajitkhan online-clinic-management-systemsubhajitkhan online-clinic-management-system listdoctor.php sql injection6.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pro_edit1.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System inv_edit1.php sql injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_edit1.php sql injection5.3 Medium
- cym1102 nginxwebuicym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection5.3 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_transac.php add sql injection5.3 Medium
- sourcecodester school registration and fee systemSourceCodester School Registration and Fee System save_class.php sql injection6.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_pos_trans.php sql injection5.3 Medium
- sourcecodester school registration and fee systemSourceCodester School Registration and Fee System pay_report.php sql injection6.9 Medium
- sourcecodester school registration and fee systemSourceCodester School Registration and Fee System delete_stud.php sql injection6.9 Medium
- sourcecodester school registration and fee systemSourceCodester School Registration and Fee System save_stud.php sql injection6.9 Medium
- gongshengyue onlinebooksGongShengyue OnlineBooks listSplit BooksServlet.java sql injection5.3 Medium
- fengoffice feng officeFengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection5.1 Medium
- fengoffice feng officeFengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection6.9 Medium
- sanjevirau gsubssanjevirau gsubs Electron index.js showQuerySuccessPage code injection5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection5.3 Medium
- unknown simple captcha with cloudflare turnstileSimple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation6.5 Medium
- cookiescookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options4.8 Medium
- rabindralamsal inventory-management-systemRizwan17 inventory-management-system manage.php storeCustomerOrderInvoice sql injection6.9 Medium
- Show moreLoading…