CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- oray pugongying x5 proOray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro Dnsmasq crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro SNMP snmp_set crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro Ser2net crlf injection9.4 Critical
- hashenudara edoc-doctor-appointment-systemHashenUdara edoc-doctor-appointment-system add-new.php sql injection6.9 Medium
- sony neural network librariesSony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection5.3 Medium
- sony neural network librariesSony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System deletetransac.php sql injection5.3 Medium
- No product listedDedeCMS update_guide.php require_once code injection5.1 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System save_profile.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System edit_dealer.php sql injection6.9 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System adddealer.php sql injection6.9 Medium
- alfresco activitiAlfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection5.3 Medium
- sourcecodester performance indicator systemSourceCodester Performance Indicator System deleteproduct.php sql injection5.3 Medium
- krupalshah employee recruitment systemkrupalshah Employee Recruitment System Registration registerform3.php sql injection6.9 Medium
- krupalshah employeerecruitmentsystemkrupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection6.9 Medium
- krupalshah employeerecruitmentsystemkrupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection6.9 Medium
- mansi-k restaurant imsmansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection6.9 Medium
- pig-mesh pigpig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection5.3 Medium
- travisun opptrixTravisun Opptrix Import Endpoint import code injection6.9 Medium
- travisun opptrixTravisun Opptrix Schedule API setup command injection6.9 Medium
- gitroomhq postiz-appPath traversal in post media lets any registered user read server files9.6 Critical
- i18next i18next-http-backendi18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl2.3 Low
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message4.8 Medium
- mongodb libmongocryptKMS request injection via unsanitized key vault and provider values in libmongocrypt6.0 Medium
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system Insertion insert.php sql injection6.9 Medium
- totolink a950rgTOTOLINK A950RG product.so UploadCustomModule command injection10.0 Critical
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system update.php sql injection6.9 Medium
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system delete.php sql injection6.9 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System transactionsave.php sql injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System orderdetail.php sql injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System inserttrans.php sql injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System deleteproduct.php sql injection5.3 Medium
- projectworlds advanced library management systemProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection5.3 Medium
- projectworlds advanced library management systemProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection5.3 Medium
- projectworlds advanced library management systemProjectWorlds Advanced Library Management System edit_member.php sql injection5.1 Medium
- projectworlds advanced library management systemProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection6.9 Medium
- oretnom23 file-management-system-phporetnom23 file-management-system-php File Management files.php sql injection6.9 Medium
- cisco emergency responder, unified communications manager, unity connection +1 more +3 moreCisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.9.8 Critical
- oretnom23 file-management-system-phporetnom23 file-management-system-php File Download download.php readfile sql injection6.9 Medium
- oretnom23 file-management-system-phporetnom23 file-management-system-php Folder Management admin_class.php save_files sql injection6.9 Medium
- oretnom23 file-management-system-phporetnom23 file-management-system-php User Account Management admin_class.php save_user sql injection6.9 Medium
- oretnom23 file-management-system-phporetnom23 file-management-system-php admin_class.php login sql injection6.9 Medium
- itsourcecode sales-and-inventory-systemitsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection5.3 Medium
- itsourcecode sales-and-inventory-systemitsourcecode Sales-and-Inventory-System cust_del.php sql injection5.3 Medium
- itsourcecode sales-and-inventory-systemitsourcecode Sales-and-Inventory-System cust_edit.php sql injection5.3 Medium
- dhikshitha29 insurance-management-systemdhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection6.9 Medium
- dhikshitha29 insurance-management-systemdhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection6.9 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System report_search.php mysqli_query sql injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System deletecustomer.php sql injection5.3 Medium
- Show moreLoading…