CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection5.1 Medium
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection5.1 Medium
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System edit_class.php sql injection5.1 Medium
- sourcecodester drug recommendation systemSourceCodester Drug Recommendation System Student Registration add_student.php sql injection6.9 Medium
- itsourcecode online admission systemitsourcecode Online Admission System login1.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system Take Order delivery.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system Order Assignment Block admin.php sql injection5.3 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system donate.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection6.9 Medium
- rainygao docsysRainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection6.9 Medium
- No product listedmooSocial all-products sql injection6.9 Medium
- comsenz discuz!Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection5.1 Medium
- internlm mindsearchInternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection10.0 Critical
- unknown all in one seoAll in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search Query6.5 Medium
- codeastro simple loan management systemCodeAstro Simple Loan Management System index.php sql injection5.3 Medium
- codeastro simple pharmacy management systemCodeAstro Simple Pharmacy Management System delete.php sql injection5.3 Medium
- codeastro simple pharmacy management systemCodeAstro Simple Pharmacy Management System view.php sql injection5.3 Medium
- onetwothreeneth hospitalmanagementsystemonetwothreeneth HospitalManagementSystem edit_accounts.php get sql injection6.9 Medium
- itsourcecode online admission system projectitsourcecode Online Admission System Project confirm.php sql injection5.3 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data5.4 Medium
- stellarwp the events calendarThe Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' Parameter6.5 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php activity sql injection6.9 Medium
- codezips pet shop management systemitsourcecode Pet Shop Management System admin_reservefilter.php sql injection5.3 Medium
- codezips pet shop management systemitsourcecode Pet Shop Management System admin_reject_completed.php sql injection5.3 Medium
- codeastro leave management systemitsourcecode Leave Management System controller.php sql injection5.3 Medium
- codeastro leave management systemitsourcecode Leave Management System controller.php sql injection5.3 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System table_booking.php mysqli_query sql injection6.9 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection6.9 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection6.9 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection6.9 Medium
- os4ed opensis-classicOS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection5.1 Medium
- os4ed opensis-classicOS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection5.3 Medium
- os4ed opensis-classicOS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection5.3 Medium
- os4ed opensis-classicOS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection5.3 Medium
- os4ed opensis-classicOS4ED openSIS-Classic General Information Tab Student.php save action sql injection5.1 Medium
- sourcecodester car driving school management systemSourceCodester Car Driving School Management System Master.php save_enrollment sql injection6.9 Medium
- sourcecodester online leave management systemSourceCodester Online Leave Management System page reports sql injection5.1 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System exam-delete.php sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System questions-view.php sql injection6.9 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 ping command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_time_zone command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_syslog command injection9.4 Critical
- risesoft-y9 workflow-enginerisesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection6.9 Medium
- mahonelau kykmsmahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injection6.9 Medium
- tibco administratorTIBCO Administrator Injection Vulnerability8.7 High
- modsetter surfsenseMODSetter SurfSense MCP Connector Integration test command injection5.3 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 set_passwd command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_online_client command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_online_client command injection9.4 Critical
- Show moreLoading…