CWE-94: Improper Control of Generation of Code
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Also known as Code Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- deepwisdom metagptFoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection6.9 Medium
- deepwisdom metagptFoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection6.9 Medium
- wago cc100 (0751-9x01), edge controller (0752-8303-8000-0002), pfc100 g1 (0750-810-xxxx-xxxx) +10 more +12 moreWago: Vulnerability in WBM through Open VPN7.2 High
- jeecgboot jimureportjeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection5.1 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_product.php cross site scripting4.8 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_football.php cross site scripting4.8 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_running.php cross site scripting4.8 Medium
- code-projects simple it discussion forumcode-projects Simple IT Discussion Forum edit-category.php cross site scripting5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System delmemberinfo.php cross site scripting5.3 Medium
mapserverUbuntuA Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows...9.1 Critical- No product listedAn issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to...8.8 High
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLab5.7 Medium
- sourcecodester sales and inventory systemSourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting5.1 Medium
- openstatushq openstatusopenstatusHQ openstatus Onboarding Endpoint client.tsx cross site scripting5.3 Medium
- code-projects easy blog sitecode-projects Easy Blog Site update.php cross site scripting5.1 Medium
- vimVim Ex command injection in Vims NetBeans integration5.0 Medium
- mervinpraison praisonaiPraisonAI has a Template Injection in Agent Tool Definitions8.8 High
- zammadZammad has a server-side template injection leading to RCE via AI Agent8.7 High
- six apart ltd. movable type, movable type advanced, movable type premium +2 more +4 moreMovable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow...9.3 Critical
- statamcp stata-mcpstata-mcp has insufficient validation of user-supplied Stata do-file content that can lead to command execution9.8 Critical
- b3log siyuanSiYuan affected by Remote Code Execution in the Electron desktop client via stored XSS in synced table captions9.1 Critical
tech.powerjob:powerjob-server-starterMavenPowerJob OpenAPI Endpoint addWorkflowNode GroovyEvaluator.evaluate code injection6.9 Medium- churchcrm, churchcrm crm +1 moreChurchCRM Affected by Unauthenticated RCE in Install Wizard10.0 Critical
- dolibarr erp/crm, erp\/crm +1 moreDolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()8.6 High
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans8.8 High
- thedaylightstudio fuel cmsDaylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution ...8.8 High
- No product listedDual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that...9.1 Critical
- kantorge yaffayaffa vulnerable to Cross Site Scripting6.1 Medium
- No product listedKoha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping,...9.8 Critical
- code-projects online hotel bookingcode-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting5.3 Medium
- mattieb dyeCode injection in dye template expressions6.6 Medium
- forceworkbenchWorkbench Affected by Remote Code Execution (RCE) via Malicious Cookie in Timezone Conversion9.3 Critical
- cyber-iii student-management-systemCyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting5.3 Medium
- cyber-iii student-management-systemCyber-III Student-Management-System add%20notice.php cross site scripting4.8 Medium
- glpi-project glpiGLPI has a Server-Side Template Injection via Double-Compilation9.1 Critical
- code-projects online shoe storecode-projects Online Shoe Store Add Product admin_feature.php cross site scripting4.8 Medium
- cyber-iii student-management-systemCyber-III Student-Management-System batch-notice.php cross site scripting4.8 Medium
- cyber-iii student-management-systemCyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting4.8 Medium
- assafelovic gpt-researcherassafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injection6.9 Medium
- assafelovic gpt-researcherassafelovic gpt-researcher Report API app.py cross site scripting5.3 Medium
- assafelovic gpt-researcherassafelovic gpt-researcher WebSocket researcher.py cross site scripting5.3 Medium
- givanz vvvebjsgivanz Vvvebjs File Upload Endpoint upload.php cross site scripting5.3 Medium
- premai-io premsqlpremAI-io premsql followup.py eval code injection5.3 Medium
- fosowl agenticseekFosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection6.9 Medium
- No product listedAkaunting Invoice/Billing cross site scripting5.1 Medium
- provectus kafka-ui, ui +1 moreprovectus kafka-ui Endpoint testexecutions validateAccess code injection6.9 Medium
- badlogic pi-monobadlogic pi-mono loader.ts discoverAndLoadExtensions code injection5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting5.3 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System Parameter modifymember.php cross site scripting5.3 Medium
- Show moreLoading…