CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- draytek vigor2960DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection5.3 Medium
- draytek vigor2960DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection5.3 Medium
- draytek vigor2960DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection9.4 Critical
- draytek vigor2960DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection9.4 Critical
- opensource-socialnetworkopensource-socialnetwork Cache Settings dynamic.php input code injection4.8 Medium
- No product listedOsclass Item Model Item.php findUserItems sql injection6.9 Medium
- h3c magic nx15H3C Magic NX15 RPC esps write code injection9.4 Critical
- wuxi wubang security software wubang five-in-one safety production management information systemWuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection6.9 Medium
- vraj404 criminal-management-systemvraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection6.9 Medium
- vraj404 criminal-management-systemvraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection6.9 Medium
- vraj404 criminal management systemvraj404 Criminal Management System Submission Form home.php sql injection6.9 Medium
- vraj404 criminal-management-systemvraj404 Criminal-Management-System search.php sql injection6.9 Medium
- satya-vinay events-management-systemsatya-vinay Events-Management-System Registration-Delete dodelete.php sql injection6.9 Medium
- satya-vinay events-management-systemsatya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection6.9 Medium
- llsourcell doctor-dignityllSourcell Doctor-Dignity chat_module.py _get_lib_module code injection5.3 Medium
- subhajitkhan online-clinic-management-systemsubhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection6.9 Medium
- axa group nlp.jsAXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection5.3 Medium
- mispMISP CSS Injection via Remote Tag Colour in Event Preview4.8 Medium
- No product listedDeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection5.1 Medium
- No product listedDeepPavlov Config Reference Resolver params.py resolve code injection5.3 Medium
- dav-ee dairy-management-systemDav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection5.3 Medium
- dav-ee dairy-management-systemDav-ee dairy-management-system delete.php mysqli_query sql injection5.1 Medium
- dav-ee dairy-management-systemDav-ee dairy-management-system add.php mysqli_query sql injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System confirm.php sql injection5.3 Medium
- llamachinese llama-chineseLlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection5.3 Medium
- rvc-project retrieval-based-voice-conversion-webuiRVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection5.3 Medium
- aircheng-org iwebshop-5aircheng-org iWebShop-5 util.php search sql injection5.1 Medium
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System Exam exam.php startExam sql injection5.3 Medium
- wongkinyiu yolov9WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection5.3 Medium
- kishan0725 hospital management systemkishan0725 Hospital Management System Appointment Cancellation admin-panel.php mysqli_query sql injection6.9 Medium
- automatic1111 stable-diffusion-webuiAUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection5.3 Medium
- alexpasmantier televisionalexpasmantier television entry.rs output command injection4.8 Medium
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System AJAX Endpoint exammanger.php topicslist sql injection6.9 Medium
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System database.php getreport sql injection6.9 Medium
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System subjectsdb.php sql injection6.9 Medium
- nemotyrant manongnemoTyrant manong func.php arr2sql sql injection6.9 Medium
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner8.6 High
- progress kendo ui, progress software kendo ui for jquery +1 moreMDX and SOAP Injection in Kendo UI for jQuery7.5 High
- themehigh email customizer for woocommerce (pro)Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter8.8 High
- cemtan sar2htmlcemtan sar2html Archive Processing sar2html.py updateDb sql injection6.9 Medium
- cemtan sar2htmlcemtan sar2html sar2html.py index sql injection6.9 Medium
- cyberchimps responsive blocksResponsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email5.4 Medium
- microsoft azure-storage-blob-batch, edge chromium, edge (chromium-based) +2 moreAzure Storage Library Elevation of Privilege Vulnerability8.1 High
- code-projects online reviewer systemSourceCodester Online Reviewer System index.php prepare sql injection6.9 Medium
- sourcecodester online exam systemSourceCodester Online Exam System Login Endpoint loginExe.php sql injection6.9 Medium
- phpgurukul art gallery management systemSourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection6.9 Medium
- Show moreLoading…