VYPR

CWE-94

Improper Control of Generation of Code ('Code Injection')

BaseDraftLikelihood: Medium

Description

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-242 · CAPEC-35 · CAPEC-77

CVEs mapped to this weakness (4,701)

page 17 of 236
  • CVE-2015-0855CriMar 23, 2017
    Pitivi
    Pitivi
    risk 0.64cvss 9.8epss 0.03

    The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.

  • CVE-2016-5726CriFeb 9, 2017
    Simple Machines
    Simple Machines Forum
    risk 0.64cvss 9.8epss 0.02

    Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.

  • CVE-2016-2242CriJan 23, 2017
    Exponent
    Exponent CMS
    risk 0.64cvss 9.8epss 0.07

    Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.

  • CVE-2016-10157CriJan 23, 2017
    Akamai
    Netsession
    risk 0.64cvss 9.8epss 0.02

    Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code…

  • CVE-2016-7954CriDec 22, 2016
    Bundler
    Bundler
    risk 0.64cvss 9.8epss 0.08

    Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

  • CVE-2016-7110CriSep 7, 2016
    Huawei
    Uma
    risk 0.64cvss 9.8epss 0.03

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109.

  • CVE-2016-7109CriSep 7, 2016
    Huawei
    Uma
    risk 0.64cvss 9.8epss 0.04

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110.

  • CVE-2016-3154CriApr 8, 2016
    Spip
    Spip
    risk 0.64cvss 9.8epss 0.02

    The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

  • CVE-2016-3153CriApr 8, 2016
    Spip
    Spip
    risk 0.64cvss 9.8epss 0.02

    SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.

  • CVE-2016-1986CriFeb 12, 2016
    Microfocus
    Continuous Delivery Automation
    risk 0.64cvss 9.8epss 0.04

    HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

  • CVE-2007-5565CriOct 18, 2007
    Phpscms
    Phpscms
    risk 0.64cvss 9.8epss 0.01

    PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE because the identified code is in a function that is not…

  • CVE-2007-5097CriSep 26, 2007
    Online Fantasy Football League
    Offl
    risk 0.64cvss 9.8epss 0.01

    PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter. NOTE: this issue is disputed by CVE because a __FILE__ test protects…

  • CVE-2007-4290CriAug 9, 2007
    Guestbook Script
    Guestbook Script
    risk 0.64cvss 9.8epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php,…

  • CVE-2006-7105CriMar 3, 2007
    Smarty
    Smarty
    risk 0.64cvss 9.8epss 0.02

    PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably…

  • CVE-2006-6975CriFeb 8, 2007
    Centipaid
    Centipaid
    risk 0.64cvss 9.8epss 0.03

    PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $class_pwd is set to a…

  • CVE-2006-5610CriOct 31, 2006
    Fully Modded Phpbb
    Fully Modded Phpbb
    risk 0.64cvss 9.8epss 0.01

    PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

  • CVE-2006-3136CriJun 22, 2006
    Nucleus CMS
    Nucleus CMS
    risk 0.64cvss 9.8epss 0.02

    Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4)…

  • CVE-2025-26264HigFeb 27, 2025
    Geovision
    GV-ASWeb
    risk 0.63cvss 8.8epss 0.18

    GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary…

  • CVE-2024-11613CriJan 8, 2025
    Iptanus
    Wordpress File Upload
    risk 0.63cvss 9.8epss 0.04

    The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to, and including, 4.24.15 via the 'wfu_file_downloader.php' file. This is due to lack of proper sanitization of the…

  • CVE-2024-12471HigJan 7, 2025
    WordPress
    Post Saint
    risk 0.63cvss 8.8epss 0.01

    The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and file type validation on the add_image_to_library AJAX action function in all…