VYPR

CWE-94

Improper Control of Generation of Code ('Code Injection')

BaseDraftLikelihood: Medium

Description

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-242 · CAPEC-35 · CAPEC-77

CVEs mapped to this weakness (7,342)

page 258 of 368
  • CVE-2011-2404Aug 11, 2011
    Microfocus
    Easy Printer Care Software
    risk 0.09cvss —epss 0.74

    A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and…

  • CVE-2010-3973Dec 23, 2010
    Microsoft
    Wmi Administrative Tools
    risk 0.09cvss —epss 0.72

    The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted…

  • CVE-2010-0822Jun 8, 2010
    Microsoft
    Office
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted OBJ (0x5D) record, aka "Excel Object Stack…

  • CVE-2010-0805Mar 31, 2010
    Microsoft
    Internet Explorer
    risk 0.09cvss —epss 0.81

    The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the…

  • CVE-2009-3672Dec 2, 2009
    Microsoft
    Internet Explorer
    risk 0.09cvss —epss 0.72

    Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag…

  • CVE-2008-5499Dec 18, 2008
    Adobe Inc.
    Flash Player For Linux
    risk 0.09cvss —epss 0.79

    Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.

  • CVE-2007-5423Oct 12, 2007
    Tiki
    Tiki
    risk 0.09cvss —epss 0.77

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.

  • CVE-2005-1921Jul 5, 2005
    Drupal
    Drupal
    risk 0.09cvss —epss 0.79

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7)…

  • CVE-2015-5603Sep 21, 2015
    Atlassian
    Jira
    risk 0.08cvss —epss 0.59

    The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

  • CVE-2014-8636Jan 14, 2015
    Mozilla Corporation
    Firefox
    risk 0.08cvss —epss 0.65

    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.

  • CVE-2014-6321Nov 11, 2014
    Microsoft
    Windows
    risk 0.08cvss —epss 0.96

    Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka…

  • CVE-2014-5519Sep 11, 2014
    Phpwiki
    Phpwiki
    risk 0.08cvss —epss 0.65

    The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. NOTE: some of these details are obtained from third party information.

  • CVE-2014-3789May 22, 2014
    Cogentdatahub
    DataHub
    risk 0.08cvss —epss 0.63

    GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.

  • CVE-2012-5932Dec 24, 2012
    Microfocus
    Privileged User Manager
    risk 0.08cvss —epss 0.63

    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.

  • CVE-2012-1876Jun 12, 2012
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.65

    Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a nonexistent object, leading to a heap-based buffer overflow, aka "Col Element Remote…

  • CVE-2012-1875Jun 12, 2012
    Microsoft
    Internet Explorer
    risk 0.08cvss —epss 0.62

    Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."

  • CVE-2011-4828Dec 15, 2011
    Autosectools
    V CMS
    risk 0.08cvss —epss 0.65

    Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in temp/.

  • CVE-2010-0239Feb 10, 2010
    Microsoft
    Windows
    risk 0.08cvss —epss 0.61

    The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted…

  • CVE-2009-2532Oct 14, 2009
    Microsoft
    Windows
    risk 0.08cvss —epss 0.62

    Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process the command value in an SMB Multi-Protocol Negotiate Request packet, which allows remote attackers to execute arbitrary code via a crafted SMBv2 packet to the…

  • CVE-2009-1136Jul 15, 2009
    Microsoft
    Office
    risk 0.08cvss —epss 0.62

    The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet…