cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 107

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2018-19220EPSS 1.7%

    An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI.

  2. 9.8CVE-2018-19196EPSS 3.3%

    An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types (jpg, jpeg, bmp, png, …

  3. 9.8CVE-2018-19180EPSS 1.5%

    statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX field, which is written…

  4. 9.8CVE-2018-19127ExploitEPSS 21%

    A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template paramet…

  5. 7.2CVE-2018-19053EPSS 1.4%

    PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.

  6. 9.8CVE-2018-14667KEVEPSS 74%

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized o…

  7. 9.8CVE-2018-18903EPSS 5.2%

    Vanilla 2.6.x before 2.6.4 allows remote code execution.

  8. 9.8CVE-2018-6012EPSS 1.3%

    The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function.

  9. 9.8CVE-2018-18892EPSS 2.6%

    MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.

  10. 8.8CVE-2016-5402EPSS 5.9%

    A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as…

  11. 9.8CVE-2018-18835EPSS 1.6%

    upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.

  12. 9.8CVE-2018-18461EPSS 4.2%

    The Arigato Autoresponder and Newsletter (aka bft-autoresponder) v2.5.1.7 plugin for WordPress allows remote attackers to execute arbitrary code via PHP code in attachments[] data to models/attachment.php.

  13. 8.8CVE-2018-18426EPSS 2.4%

    s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter.

  14. 9.8CVE-2018-18319EPSS 5.4%

    An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI.…

  15. 9.8CVE-2018-18258EPSS 1.5%

    An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI.

  16. 9.8CVE-2018-7633EPSS 1.3%

    Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user issue a manipulated POST request.

  17. 9.8CVE-2018-18083EPSS 2.5%

    An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.

  18. 9.8CVE-2015-9272EPSS 5.0%

    The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file co…

  19. 9.8CVE-2018-14804EPSS 3.5%

    Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution.

  20. 7.2CVE-2018-17827EPSS 1.4%

    HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php.

  21. 8.1CVE-2018-17364EPSS 0.9%

    OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.

  22. 9.8CVE-2018-17173ExploitEPSS 57%

    LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

  23. 9.8CVE-2018-17207ExploitEPSS 60%

    An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving ar…

  24. 8.8CVE-2018-14630EPSS 4.6%

    moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to i…

  25. 7.8CVE-2018-11781EPSS 1.0%

    Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

  26. 9.8CVE-2018-11780EPSS 11%

    A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

  27. 7.2CVE-2018-17134EPSS 2.1%

    admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field.

  28. 7.2CVE-2018-17133EPSS 2.1%

    admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting.

  29. 7.2CVE-2018-17132EPSS 2.1%

    admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.

  30. 7.2CVE-2018-17131EPSS 2.1%

    admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field.

  31. 9.8CVE-2018-17126EPSS 3.2%

    CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.

  32. 9.8CVE-2018-17036EPSS 1.7%

    An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.

  33. 7.5CVE-2018-17030EPSS 2.3%

    BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to execute arbitrary code via /core/admin/auto-modules/forms/process.php.

  34. 9.8CVE-2018-16975EPSS 3.7%

    An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with <?php content, because of insuf…

  35. 6.7CVE-2018-3686EPSS 0.4%

    Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.

  36. 7.2CVE-2018-15886EPSS 1.6%

    Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=edit_snippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing th…

  37. 9.8CVE-2018-16771EPSS 2.7%

    Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.

  38. 7.2CVE-2018-16604EPSS 1.5%

    An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username because the username is surrounded by double quotes (e.g., "${phpinfo()}").

  39. 7.8CVE-2018-0675EPSS 1.4%

    AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors.

  40. 7.8CVE-2018-0674EPSS 1.4%

    AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors.

  41. 7.2CVE-2018-16343EPSS 2.7%

    SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.

  42. 9.8CVE-2018-6499EPSS 2.4%

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 201…

  43. 9.8CVE-2018-6498EPSS 3.1%

    Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 201…

  44. 9.8CVE-2011-2767EPSS 8.8%

    mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator…

  45. 8.8CVE-2018-15728EPSS 2.9%

    Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API…

  46. 5.4CVE-2017-1753EPSS 0.8%

    Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Fo…

  47. 9.8CVE-2015-5243EPSS 6.2%

    phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

  48. 9.8CVE-2018-3784EPSS 3.3%

    A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.

  49. 8.8CVE-2018-8346EPSS 20%

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Serve…

  50. 7.5CVE-2018-8345EPSS 15%

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT…