CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,808 vulnerabilities with CWE-74
CVE-2024-11744 HIGH
1000 Projects Portfolio Management System MCA 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11663 HIGH
Codezips E-Commerce Site 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11659 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via iperf Argument
CVSS 4.7
CVE-2024-11658 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT <= 20241118 - OS Command Injection via countryCode Parameter
CVSS 4.7
CVE-2024-11657 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via diag_nslookup Parameter
CVSS 4.7
CVE-2024-11656 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via diag_ping6 Argument
CVSS 4.7
CVE-2024-11655 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT up to 20241118 - OS Command Injection via diag_ping Parameter
CVSS 4.7
CVE-2024-11654 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via diag_traceroute6 Argument
CVSS 4.7
CVE-2024-11653 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via diag_traceroute Parameter
CVSS 4.7
CVE-2024-11652 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, ENS620EXT - OS Command Injection via sn_https Parameter
CVSS 4.7
CVE-2024-11651 MEDIUM
EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT - OS Command Injection via wifi_schedule_day_em_5 Parameter
CVSS 4.7
CVE-2024-11649 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11648 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11647 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11646 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11234 MEDIUM
PHP 8.1.0-8.1.30 - HTTP Request Smuggling via Proxy Stream URI Sanitization Bypass
CVSS 4.8
CVE-2024-11632 HIGH
Simple Car Rental System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11631 MEDIUM
itsourcecode Tailoring Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-11592 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11591 HIGH
1000 Projects Beauty Parlour Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11590 HIGH
1000 Projects Bookstore Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2024-11589 MEDIUM
itsourcecode Tailoring Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-11487 MEDIUM
Code4Berry Decoration Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-11305 MEDIUM
Altenergy Power Control Software <20241108 - SQL Injection
CVSS 6.3
CVE-2024-11258 HIGH
1000projects Beauty Parlour Management System 1.0 - SQL Injection via Username Parameter
CVSS 7.3
Details
Vulnerabilities 4,808
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits