CWE-97: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
The product generates a web page, but does not neutralize or incorrectly neutralizes user-controllable input that could be interpreted as a server-side include (SSI) directive.
A kind of CWE-96 Static Code Injection.
From the CWE List. © The MITRE Corporation.
Newest
- kentico xperience Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service 8.7 High
- kunbus gmbh revolution pi pictory KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page 5.1 Medium
- kunbus gmbh revolution pi pictory KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page 8.5 High
- dell networker, networker management console +1 more Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0... 7.8 High
- aptrs APTRS has SSTI vulnerability 7.8 High
- strongshop StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability... 7.2 High
- wintercms winter Winter CMS Server-Side Template Injection (SSTI) vulnerability 7.2 High