CWE-94: Improper Control of Generation of Code
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Also known as Code Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- mmaitre314 picklescanpicklescan - Undetected Remote Code Execution via _operator.methodcaller7.6 High
- mmaitre314 picklescanPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget7.6 High
- mmaitre314 picklescanPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget7.6 High
- 08cms novel system08CMS Novel System Template mtpls.inc.php code injection5.1 Medium
- zhujunliang3 work platformzhujunliang3 work_platform Content cross site scripting5.1 Medium
- sunhailin12315 product-review 商品评价系统sunhailin12315 product-review 商品评价系统 Write a Review cross site scripting5.1 Medium
- villatheme lucky wheel for woocommerce – spin a saleLucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags7.2 High
- sohu cachecloudSohuTV CacheCloud AppDataMigrateController.java index cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud LoginController.java init cross site scripting5.3 Medium
- sohu cachecloudSohuTV CacheCloud MachineManageController.java doPodList cross site scripting5.1 Medium
- campcodes park ticketing systemCampcodes Park Ticketing System admin_class.php save_pricing cross site scripting4.8 Medium
- jdcloud ax1800 firmware, ax3000 firmware, ax6600 firmware +3 more +5 moreJD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 ...9.8 Critical
- mmaitre314 picklescanpicklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval7.6 High
- github.com/golang/vscode-go, go +1 moreUnexpected untrusted code execution in github.com/golang/vscode-go5.4 Medium
- sohu cachecloudSohuTV CacheCloud QuartzManageController.java doQuartzList cross site scripting4.8 Medium
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass7.6 High
- mmaitre314 picklescanpicklescan - Remote Code Execution via operator.methodcaller Detection Bypass7.6 High
- sohu cachecloudSohuTV CacheCloud ResourceController.java index cross site scripting4.8 Medium
- sohu cachecloudSohuTV CacheCloud TaskController.java taskQueueList cross site scripting4.8 Medium
- sohu cachecloudSohuTV CacheCloud WebResourceController.java redirectNoPower cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud AppClientDataShowController.java doIndex cross site scripting4.8 Medium
- monetizemore advanced ads – ad manager & adsenseAdvanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode7.2 High
- mohammad i. okfie if as shortcodeWordPress IF AS Shortcode plugin <= 1.2 - Remote Code Execution (RCE) vulnerability9.9 Critical
- campcodes complete online beauty parlor management system, online beauty parlor management system +1 moreCampcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting4.8 Medium
- sohu cachecloudSohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud ServerController.java index cross site scripting5.1 Medium
- advaya softech gems erp portalAdvaya Softech GEMS ERP Portal Error Message home.jsp cross site scripting5.3 Medium
- rawchen ecmsrawchen ecms Add New Product updateProductServlet.java updateProductServlet cross site scripting4.8 Medium
- cmseasyCmsEasy Backend Template Management template_admin.php savetemp_action code injection5.1 Medium
- sohu cachecloudSohuTV CacheCloud UserManageController.java doUserList cross site scripting4.8 Medium
- sohu cachecloudSohuTV CacheCloud TotalManageController.java doTotalList cross site scripting4.8 Medium
- dayrui xunruicmsdayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting5.3 Medium
- yourmaileyes moocyourmaileyes MOOC Submission MainController.java subreview cross site scripting5.1 Medium
- shanyu sycmsshanyu SyCms Administrative Panel FileManageController.class.php addPost code injection5.1 Medium
- chenjinchuang lin-cms-tp5ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection5.3 Medium
- eigent1-click Remote Code Execution (RCE) vulnerability in Eigent9.3 Critical
- xspeeder sxzosXspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python...10.0 Critical
- postmanlabs httpbinpostmanlabs httpbin core.py cross site scripting5.1 Medium
- sunkaifei flycmssunkaifei FlyCMS User Login UserController.java userLogin cross site scripting5.3 Medium
- sunkaifei flycmssunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting5.3 Medium
- tychesoftwares print invoice & delivery notes for woocommercePrint Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution9.8 Critical
- code-projects student information systemcode-projects Student Information System profile.php cross site scripting5.1 Medium
- hugging face transformersHugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability7.8 High
- hugging face transformersHugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability7.8 High
- hugging face transformersHugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability7.8 High
- cmsimple-xh cmsimple xhCMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing8.6 High
- cmsimpleCMSimple 5.4 Authenticated Remote Code Execution via Template Editing8.6 High
- Show moreLoading…