CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php update sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php update sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php add sql injection6.9 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection5.3 Medium
- codeastro leave management systemitsourcecode Leave Management System index.php sql injection5.3 Medium
- tduckcloud tduck-platformTDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection5.3 Medium
- anirbandutta9 college-notes-galleryanirbandutta9 College-Notes-Gallery login.php sql injection6.9 Medium
- mispMISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths7.7 High
- mtrano apencmsmtrano APENCMS Template weasel.php eval code injection4.8 Medium
- yonyou u8cloudYonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection5.3 Medium
- yonyou ksoaYonyou KSOA search_list.jsp sql injection6.9 Medium
- stellarwp givewpGiveWP < 4.16.9 - Unauthenticated Arbitrary Shortcode Execution via Donor Name6.5 Medium
- drogonframework drogondrogonframework drogon ORM Criteria.cc makeCriteria sql injection6.9 Medium
- drogonframework drogondrogonframework drogon ORM Mapper Mapper.h orderBy sql injection6.9 Medium
- chengdu feiyuxing technology feiyu star routerChengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection5.3 Medium
- chengdu feiyuxing technology feiyu star routerChengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection5.1 Medium
- No product listedQCMS Content Detail Controllers.php self_Tmp sql injection6.9 Medium
- No product listedRooCMS Frontend Rendering site_pagePHP.php eval code injection5.1 Medium
- netcore nbr200v2Netcore NBR200V2 Backup Restore restore.cgi command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection10.0 Critical
- netcore nbr200v2Netcore NBR200V2 LAN IP Configuration network_tools command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection9.4 Critical
- adithyayelloju restaurant management systemAdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injection5.3 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System add_menu.php sql injection5.3 Medium
- codeastro leave management systemitsourcecode Leave Management System index.php sql injection5.3 Medium
- 0-gaurav-0 nexus-mcp0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection5.3 Medium
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System edit_user.php sql injection6.9 Medium
- No product listedDedeCMS mytag_js.php code injection6.9 Medium
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System edit_symptom.php sql injection6.9 Medium
- code-projects internship management systemcode-projects Internship Management System Admin Login Form login.php sql injection6.9 Medium
- code-projects internship management systemcode-projects Internship Management System login.php sql injection6.9 Medium
- code-projects internship management systemcode-projects Internship Management System login.php sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php remove sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php remove sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php sql injection6.9 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps Command services.py generate_host_task command injection5.1 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection5.1 Medium
- aiyiyi121 sxdevopsaiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection5.1 Medium
- codeastro leave management systemitsourcecode Leave Management System controller.php sql injection5.3 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php sql injection6.9 Medium
- totolink a3002muTotolink A3002MU formWsc command injection9.4 Critical
- opajaap wp photo album plusWP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection7.5 High
- marcopiovanello yt-dlp-web-uimarcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection6.9 Medium
- microsoft azure cosmos dbAzure Cosmos DB Elevation of Privilege Vulnerability9.6 Critical
- code-projects matrimonial systemcode-projects Matrimonial System partner_preference.php writepartnerprefs sql injection6.9 Medium
- mispMISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution8.7 High
- cisco ise passive identity connector, identity services engine, identity services engine software +1 more +3 moreCisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities10.0 Critical
- codeastro leave management systemitsourcecode Leave Management System index.php sql injection5.3 Medium
- sourcecodester inventory and monitoring systemSourceCodester Inventory and Monitoring System btn_functions.php add sql injection6.9 Medium
- Show moreLoading…