Improper Neutralization
CWE-707
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.
We track 97 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 9.0. 2 have been exploited in real attacks.
Latest Improper Neutralization vulnerabilities
- 8.8 High severity
go-ibax: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to
- 9.8 Critical severity
Confession Wall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument post_id leads to sql injection. The exploit has been dis
- 8.8 High severity
Web-Based Student Clearance System: Improper Neutralization
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. This affects an unknown part of the file Admin/edit-admin.php. The manipulation of the argument id leads to sql injection. It is possible to ini
- 9.8 Critical severity
Ehoney: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB
- 9.8 Critical severity
Ehoney: Improper Neutralization
A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launche
- 9.8 Critical severity
Ehoney: Improper Neutralization
A vulnerability, which was classified as critical, was found in seccome Ehoney. Affected is an unknown function of the file /api/v1/attack/falco. The manipulation of the argument Payload leads to sql injection. It is possible to launch the attack remotely. The
- 9.8 Critical severity
Ehoney: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in seccome Ehoney. This issue affects some unknown processing of the file /api/v1/attack. The manipulation of the argument AttackIP leads to sql injection. The attack may be initiated remotely.
- 9.8 Critical severity
Online Medicine Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible t
- 8.8 High severity
Canteen Management System: Improper Neutralization
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiat
- 9.8 Critical severity
Canteen Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be init
- 9.8 Critical severity
Cashier Queuing System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql i
- 9.8 Critical severity
Sanitization Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/view_service. The manipulation of the argument id leads to sql injection. The att
- 7.2 High severity
Simple Online Public Access Catalog: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of the file /opac/Actions.php?a=login of the component Admin Login. The manipulation of the argument us
- 8.8 High severity
Human Resource Management System: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. T
- 9.8 Critical severity
OA: Improper Neutralization
A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been dis
- 9.8 Critical severity
Web-Based Student Clearance System: Improper Neutralization
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtuserna
- 9.8 Critical severity
Food Ordering Management System: Improper Neutralization
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injecti