CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- froxlorFroxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members8.4 High
- hbai-ltd toonflow-appHBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection4.8 Medium
- adithyayelloju restaurant-management-systemAdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection6.9 Medium
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System sales_history.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System edit_credit.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System product.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System edit_quantity.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System addproduct.php sql injection6.9 Medium
- storyicon comfyui segment anythingstoryicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file2dict code injection5.3 Medium
- paddlepaddle paddlexPaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System addtransacdetail.php sql injection5.3 Medium
- tinyllava factoryTinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection5.3 Medium
- code-projects online reviewer systemcode-projects Online Reviewer System User Update btn_functions.php sql injection6.9 Medium
- gitlabImproper Neutralization of Input Used for LLM Prompting in GitLab7.3 High
- imoonlab yolov13iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection4.8 Medium
- repository raerepository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection2.4 Low
- modeltc lightx2vModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection4.8 Medium
- linketic citygaussianLinketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection2.4 Low
- netcore nr268Netcore NR268 DDNS DDNSset.cgi execvp argument injection9.4 Critical
- itsourcecode online admission systemitsourcecode Online Admission System sum.php sql injection5.3 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System pbaptism.php sql injection5.3 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System ebaptism.php sql injection5.3 Medium
- edimax br-6208acEdimax BR-6208AC formWlanMP command injection10.0 Critical
- edimax br-6208acEdimax BR-6208AC formAutoFWupgrade command injection10.0 Critical
- edimax br-6208acEdimax BR-6208AC formAccept command injection6.9 Medium
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder6.3 Medium
- exponent cmsExponent CMS XML-RPC xmlrpc.php userLogin sql injection6.9 Medium
- zen cart cartZen Cart Module Configuration modules.php sql injection5.1 Medium
- zen cart cartZen Cart Admin Panel configuration.php eval sql injection2.1 Low
- zen cart cartZen Cart Administrative Module Management general.php zen_call_function code injection2.1 Low
- zen cart cartZen Cart PayPal IPN paypaldp.php zen_db_perform sql injection6.9 Medium
- dataeaseDataEase Utils.java Utils.buildCalcField sql injection5.3 Medium
- tencent weknoraTencent WeKnora SQL Validator inject.go validateSubquery sql injection5.3 Medium
- agnoagno-agi agno PythonTools python.py run_python_code code injection5.3 Medium
- No product listedSEMCMS SEMCMS_Banner.php sql injection5.3 Medium
- No product listedSEMCMS SEMCMS_Download.php sql injection5.3 Medium
- krupalshah employeerecruitmentsystemkrupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection6.9 Medium
- krupalshah employeerecruitmentsystemkrupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection6.9 Medium
- krupalshah employeerecruitmentsystemkrupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection6.9 Medium
- jackq xcmsjackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection6.9 Medium
- zkteco biotimeZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS MdBinController.java getbinallagv sql injection5.3 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection5.3 Medium
- Show moreLoading…