CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- ziroom zhome a0101Ziroom ZHOME A0101 firstSetup_wifi command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 firstLogin command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection9.4 Critical
- eleveo call recording softwareEleveo Call Recording Software User Management userAddAction.do ldap injection5.3 Medium
- code-projects matrimonial systemcode-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection5.3 Medium
- axiosAxios: Header Injection via Inherited headers After Minimal Interceptor6.9 Medium
- axiosAxios: Fetch Adapter Header Injection via Inherited FormData getHeaders6.9 Medium
- dayrui xunruicmsdayrui XunruiCMS Group Editing Home.php group_all_edit sql injection5.1 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project makeresult.php sql injection6.9 Medium
- aapanel baotaaaPanel BaoTa Domain domainMod.py get_domain_status sql injection5.1 Medium
- aapanel baotaaaPanel BaoTa data.py getData sql injection5.1 Medium
- aapanel baotaaaPanel BaoTa File Merge files.py merge_split_file command injection9.4 Critical
- devaslanphp project-managementDevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection5.3 Medium
- devaslanphp project-managementDevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection5.3 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updateguest.php sql injection5.3 Medium
- amirsanni mini-inventory-and-sales-management-systemamirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection5.3 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project addnewstudent.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project viewresult.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project mydetailsfaculty.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updatedetailsfromstudent.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updateguest.php sql injection5.3 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection5.3 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updatefaculty.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php sql injection5.3 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updatequery.php sql injection6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project Faculty Authentication loginlinkfaculty.php sql injection6.9 Medium
- zhonglun cloudposZhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection6.9 Medium
- kitty project kittyReflected unknown field names in the kitty colour control escape code allow command execution in the user's shell9.3 Critical
- eclipse foundation jettyIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to...6.9 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection5.3 Medium
- bittersecurity decepticon, decepticon-core, decepticon-sdk +2 moreDecepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context10.0 Critical
- No product listedDbGate JSON Runner runners.js code injection5.3 Medium
- java110 microcommunityjava110 MicroCommunity fallBack API Endpoint BusinessApi.java QueryServiceSMOImpl.fallBack sql injection6.9 Medium
- forma lmsForma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection5.3 Medium
- pmticket project-management-softwarepmTicket Project-Management-Software add_project.php setSync sql injection6.9 Medium
- softnews media group datalife engineSoftNews Media Group DataLife Engine Search search.php strip_data sql injection6.9 Medium
- abdurrab5 online-makeup-storeAbdurrab5 online-makeup-store Customer Login customerSignin.php sql injection6.9 Medium
- abdurrab5 online-makeup-storeAbdurrab5 online-makeup-store Admin Login index.php sql injection6.9 Medium
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.08.6 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.08.6 High
- neethuharii cafemanagementNeethuharii CafeManagement Login CafePortalLogin.php sql injection6.9 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.2 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities7.3 High
- shahjahan jewel ninja tablesNinja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data Source5.6 Medium
- unknown gtranslateGTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation4.8 Medium
- brechtvds wp recipe makerWP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment Content6.5 Medium
- iflytek astron-agentiFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection5.3 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System exam-delete.php sql injection6.9 Medium
- Show moreLoading…