VYPR

CWE-94

Improper Control of Generation of Code ('Code Injection')

BaseDraftLikelihood: Medium

Description

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-242 · CAPEC-35 · CAPEC-77

CVEs mapped to this weakness (7,045)

page 244 of 353
  • CVE-2010-1900Aug 11, 2010
    Microsoft
    Word
    risk 0.06cvss —epss 0.40

    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle…

  • CVE-2010-0027Jan 22, 2010
    Microsoft
    Internet Explorer
    risk 0.06cvss —epss 0.34

    The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary…

  • CVE-2009-2477Jul 15, 2009
    Mozilla Corporation
    Firefox
    risk 0.06cvss —epss 0.43

    js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally…

  • CVE-2008-6221Feb 20, 2009
    Dada Mail
    Dada Mail
    risk 0.06cvss —epss 0.38

    PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

  • CVE-2008-4385Oct 14, 2008
    Husdawg, LLC
    Systems Requirements Lab 3
    risk 0.06cvss —epss 0.38

    Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab,…

  • CVE-2008-2645Jun 10, 2008
    Brim Project
    Brim
    risk 0.06cvss —epss 0.39

    Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in (1) barrel/, (2) barry/, (3) mylook/, (4) oerdec/, (5) penguin/, (6) sidebar/, (7)…

  • CVE-2008-1963Apr 25, 2008
    Quate
    Grape Web Statistics
    risk 0.06cvss —epss 0.39

    PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter.

  • CVE-2008-1903Apr 22, 2008
    Newanz
    Newsoffice
    risk 0.06cvss —epss 0.39

    PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter.

  • CVE-2008-1609Apr 1, 2008
    Just Another Flat File
    JAF CMS
    risk 0.06cvss —epss 0.41

    Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter…

  • CVE-2008-1405Mar 20, 2008
    Fuzzylime
    cms
    risk 0.06cvss —epss 0.35

    PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.

  • CVE-2008-1416Mar 20, 2008
    Phpauction
    Phpauction
    risk 0.06cvss —epss 0.35

    Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) converter.inc.php, (2) messages.inc.php, and (3) settings.inc.php in includes/.

  • CVE-2008-0118Mar 11, 2008
    Microsoft
    Office
    risk 0.06cvss —epss 0.35

    Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation…

  • CVE-2008-0114Mar 11, 2008
    Microsoft
    Office
    risk 0.06cvss —epss 0.39

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.

  • CVE-2008-0115Mar 11, 2008
    Microsoft
    Office
    risk 0.06cvss —epss 0.39

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."

  • CVE-2008-0112Mar 11, 2008
    Microsoft
    Office
    risk 0.06cvss —epss 0.32

    Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."

  • CVE-2008-0113Mar 11, 2008
    Microsoft
    Excel Viewer
    risk 0.06cvss —epss 0.42

    Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell…

  • CVE-2008-1074Feb 29, 2008
    Group E
    Group E
    risk 0.06cvss —epss 0.37

    PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter.

  • CVE-2008-0803Feb 15, 2008
    Lookstrike
    Lan Manager
    risk 0.06cvss —epss 0.33

    Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sys_conf[path][real] parameter to (1) modules\class\Table.php; (2) db_admins.php, (3) db_alert.php, (4) db_double.php, (5)…

  • CVE-2008-0645Feb 7, 2008
    Portail Web PHP
    Portail Web PHP
    risk 0.06cvss —epss 0.34

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and…

  • CVE-2008-0567Feb 5, 2008
    Chronoengine
    Chronoforms
    risk 0.06cvss —epss 0.34

    Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3)…