# CWE-707.

Every Advisory and CVE whose sources give the weakness CWE-707, newest first.

## Records, newest first (an older page)

- [Codezips Hospital Appointment System doctorAction.php sql injection](https://agentprime.io/advisories/CVE-2024-10791.md)
  `CVE-2024-10791` · CVE record: Codezips Hospital Appointment System · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: Other injection, SQL injection, CWE-707
- [PHPGurukul Online Shopping Portal two_tables.php cross site scripting](https://agentprime.io/advisories/CVE-2024-10768.md)
  `CVE-2024-10768` · CVE record: PHPGurukul Online Shopping Portal · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: Other injection, Cross-site scripting (XSS), CWE-707
- [Duplicate Advisory: Umbraco CMS Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-4gmq-m9vp-jrwg.md)
  `GHSA-4gmq-m9vp-jrwg` · NuGet `Umbraco.Cms.Core`: affected `<=12.3.6`, no fixed version yet · CVSS 3.5 Low · Withdrawn · Not analysed yet · Published 4 Nov 2024 · Tags: Cross-site scripting (XSS), CWE-707
- [Codezips Pet Shop Management System productsadd.php sql injection](https://agentprime.io/advisories/CVE-2024-10752.md)
  `CVE-2024-10752` · CVE record: Codezips Pet Shop Management System · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: Other injection, SQL injection, CWE-707
- [code-projects University Event Management System submit.php sql injection](https://agentprime.io/advisories/CVE-2024-10700.md)
  `CVE-2024-10700` · CVE record: code-projects University Event Management System · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2024 · Tags: Other injection, SQL injection, CWE-707
- [Microsoft Management Console Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43572.md)
  `CVE-2024-43572` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.67 · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-707
- [Intelbras InControl Relatório de Operadores Page operador code injection](https://agentprime.io/advisories/CVE-2024-9324.md)
  `CVE-2024-9324` · CVE record: Intelbras InControl · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2024 · Tags: Other injection, Code injection, CWE-707
- [IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax](https://agentprime.io/advisories/GHSA-rwcf-gq22-ph83.md)
  `GHSA-rwcf-gq22-ph83`, `CVE-2022-3800`, `GO-2024-2783` · Go `github.com/IBAX-io/go-ibax`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-707
- [IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax](https://agentprime.io/advisories/GHSA-mgqh-3qm7-gx82.md)
  `GHSA-mgqh-3qm7-gx82`, `CVE-2022-3798`, `GO-2024-2777` · Go `github.com/IBAX-io/go-ibax`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-707
- [IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax](https://agentprime.io/advisories/GHSA-m738-584h-26p6.md)
  `GHSA-m738-584h-26p6`, `CVE-2022-3801`, `GO-2024-2775` · Go `github.com/IBAX-io/go-ibax`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.3 Medium · EPSS 0.30 · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-707
- [IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax](https://agentprime.io/advisories/GHSA-g23g-mw97-65c8.md)
  `GHSA-g23g-mw97-65c8`, `CVE-2022-3802`, `GO-2024-2770` · Go `github.com/IBAX-io/go-ibax`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-707
- [IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax](https://agentprime.io/advisories/GHSA-fcgf-j8cf-h2rm.md)
  `GHSA-fcgf-j8cf-h2rm`, `CVE-2022-3799`, `GO-2024-2759` · Go `github.com/IBAX-io/go-ibax`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: CWE-707
- [Intel(R) Power Gadget software for Windwos: Improper initialization in some Intel(R) Power Gadget software for Windwos all versions…](https://agentprime.io/advisories/CVE-2023-45315.md)
  `CVE-2023-45315` · CVE record: Intel(R) Power Gadget software for Windwos · CVSS 5.5 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-665, CWE-707
- [Intel(R) Power Gadget software for Windows: Improper neutralization in Intel(R) Power Gadget software for Windows all versions may…](https://agentprime.io/advisories/CVE-2023-42773.md)
  `CVE-2023-42773` · CVE record: Intel(R) Power Gadget software for Windows · CVSS 8.8 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-707
- [Intel(R) Power Gadget software for macOS: Improper neutralization in Intel(R) Power Gadget software for macOS all versions may…](https://agentprime.io/advisories/CVE-2023-46689.md)
  `CVE-2023-46689` · CVE record: Intel(R) Power Gadget software for macOS · CVSS 8.8 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-707
- [Intel(R) Arc(TM) & Iris(R) Xe Graphics software: Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before…](https://agentprime.io/advisories/CVE-2024-21864.md)
  `CVE-2024-21864` · CVE record: Intel(R) Arc(TM) & Iris(R) Xe Graphics software · CVSS 7.8 High · Not analysed yet · Published 16 May 2024 · Tags: CWE-86, CWE-707
- [Improper Neutralization vulnerability affects OpenText ALM Octane.](https://agentprime.io/advisories/CVE-2023-6123.md)
  `CVE-2023-6123` · CVE record: OpenText ALM Octane. · CVSS 7.5 High · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-707
- [Graphite Web Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-q99p-78hp-xg5c.md)
  `GHSA-q99p-78hp-xg5c`, `CVE-2022-4729`, `PYSEC-2026-820` · PyPI `graphite-web`: affected `<=1.1.10`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 27 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [Graphite Web Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-m973-4vpc-x43c.md)
  `GHSA-m973-4vpc-x43c`, `CVE-2022-4730`, `PYSEC-2026-819` · PyPI `graphite-web`: affected `<=1.1.10`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 27 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [Graphite Web Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-3c5x-4hvx-qrrr.md)
  `GHSA-3c5x-4hvx-qrrr`, `CVE-2022-4728`, `PYSEC-2026-818` · PyPI `graphite-web`: affected `<=1.1.10`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 27 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting](https://agentprime.io/advisories/CVE-2022-4727.md)
  `CVE-2022-4727` · CVE record: OpenMRS Appointment Scheduling Module · CVSS 3.5 Low · Not analysed yet · Published 24 Dec 2022 · Tags: CWE-707
- [SourceCodester Sanitization Management System Admin Login sql injection](https://agentprime.io/advisories/CVE-2022-4726.md)
  `CVE-2022-4726` · CVE record: SourceCodester Sanitization Management System · CVSS 6.3 Medium · Not analysed yet · Published 24 Dec 2022 · Tags: CWE-707
- [Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection](https://agentprime.io/advisories/CVE-2020-36626.md)
  `CVE-2020-36626` · CVE record: Modern Tribe Panel Builder Plugin · CVSS 5.5 Medium · Not analysed yet · Published 24 Dec 2022 · Tags: CWE-707
- [Mingsoft MCMS Cross-site Scripting vulnerability](https://agentprime.io/advisories/GHSA-6rvv-h8g7-728w.md)
  `GHSA-6rvv-h8g7-728w`, `CVE-2022-4640` · Maven `net.mingsoft:ms-mcms`: affected `<=5.2.9`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 22 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The ...](https://agentprime.io/advisories/GHSA-5pqf-rvm7-3wgw.md)
  `GHSA-5pqf-rvm7-3wgw`, `CVE-2022-4638`, `PYSEC-2022-42988` · PyPI `collective-contact-widget`: affected `<1.12`, fixed in `1.12` · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [studygolang vulnerable to cross-site scripting](https://agentprime.io/advisories/GHSA-gw62-c7w4-x449.md)
  `GHSA-gw62-c7w4-x449`, `CVE-2021-4272` · Go `github.com/studygolang/studygolang`: affected `<=0.1.0`, no fixed version yet · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: Cross-site scripting (XSS), CWE-707
- [tatoeba2 Profile Name cross site scripting](https://agentprime.io/advisories/CVE-2022-4642.md)
  `CVE-2022-4642` · CVE record: unspecified tatoeba2 · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [WP-Ban ban-options.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4631.md)
  `CVE-2022-4631` · CVE record: unspecified WP-Ban · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [sileht bird-lg layout.html cross site scripting](https://agentprime.io/advisories/CVE-2021-4274.md)
  `CVE-2021-4274` · CVE record: sileht bird-lg · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [studygolang search.go Search cross site scripting](https://agentprime.io/advisories/CVE-2021-4273.md)
  `CVE-2021-4273` · CVE record: unspecified studygolang · CVSS 4.3 Medium · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [panicsteve w2wiki Markdown index.php toHTML cross site scripting](https://agentprime.io/advisories/CVE-2021-4271.md)
  `CVE-2021-4271` · CVE record: panicsteve w2wiki · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [Imprint CMS ViewHelpers.cs SearchForm cross site scripting](https://agentprime.io/advisories/CVE-2021-4270.md)
  `CVE-2021-4270` · CVE record: unspecified Imprint CMS · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [SimpleRisk common.js checkAndSetValidation cross site scripting](https://agentprime.io/advisories/CVE-2021-4269.md)
  `CVE-2021-4269` · CVE record: unspecified SimpleRisk · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [tad_discuss cross site scripting](https://agentprime.io/advisories/CVE-2021-4267.md)
  `CVE-2021-4267` · CVE record: unspecified tad_discuss · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [Webdetails cpf DependenciesPackage.java cross site scripting](https://agentprime.io/advisories/CVE-2021-4266.md)
  `CVE-2021-4266` · CVE record: Webdetails cpf · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [siwapp-ror cross site scripting](https://agentprime.io/advisories/CVE-2021-4265.md)
  `CVE-2021-4265` · CVE record: unspecified siwapp-ror · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting](https://agentprime.io/advisories/CVE-2020-36621.md)
  `CVE-2020-36621` · CVE record: chedabob whatismyudid · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2022 · Tags: CWE-707
- [laravel-jqgrid vulnerable to SQL Injection](https://agentprime.io/advisories/GHSA-3fhj-wpvj-x5w8.md)
  `GHSA-3fhj-wpvj-x5w8`, `CVE-2021-4262`, `PKSA-shnc-7f6z-tjqv` · Packagist `mgallegos/laravel-jqgrid`: affected `<=1.3.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: SQL injection, CWE-707
- [Click Studios Passwordstate URL Field cross site scripting](https://agentprime.io/advisories/CVE-2022-3877.md)
  `CVE-2022-3877` · CVE record: Click Studios Passwordstate and 1 more · CVSS 3.5 Low · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-707
- [pacman-canvas db-handler.php addHighscore sql injection](https://agentprime.io/advisories/CVE-2021-4261.md)
  `CVE-2021-4261` · CVE record: unspecified pacman-canvas · CVSS 6.3 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Review Flow cross site scripting](https://agentprime.io/advisories/CVE-2022-4602.md)
  `CVE-2022-4602` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Shipping/Member Discount/Icon cross site scripting](https://agentprime.io/advisories/CVE-2022-4601.md)
  `CVE-2022-4601` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Product Carousel cross site scripting](https://agentprime.io/advisories/CVE-2022-4600.md)
  `CVE-2022-4600` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Product cross site scripting](https://agentprime.io/advisories/CVE-2022-4599.md)
  `CVE-2022-4599` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Announcement cross site scripting](https://agentprime.io/advisories/CVE-2022-4598.md)
  `CVE-2022-4598` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza LifeStyle Create Product v2_products cross site scripting](https://agentprime.io/advisories/CVE-2022-4597.md)
  `CVE-2022-4597` · CVE record: Shoplazza LifeStyle · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [Shoplazza Add Blog Post cross site scripting](https://agentprime.io/advisories/CVE-2022-4596.md)
  `CVE-2022-4596` · CVE record: unspecified Shoplazza · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [django-openipam exposed_hosts.html cross site scripting](https://agentprime.io/advisories/CVE-2022-4595.md)
  `CVE-2022-4595` · CVE record: unspecified django-openipam · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [retra-system cross site scripting](https://agentprime.io/advisories/CVE-2022-4593.md)
  `CVE-2022-4593` · CVE record: unspecified retra-system · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [luckyshot CRMx index.php commentdelete sql injection](https://agentprime.io/advisories/CVE-2022-4592.md)
  `CVE-2022-4592` · CVE record: luckyshot CRMx · CVSS 6.3 Medium · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [ctrlo lenio Task task.tt cross site scripting](https://agentprime.io/advisories/CVE-2021-4257.md)
  `CVE-2021-4257` · CVE record: ctrlo lenio · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [ctrlo lenio index.tt cross site scripting](https://agentprime.io/advisories/CVE-2021-4256.md)
  `CVE-2021-4256` · CVE record: ctrlo lenio · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [ctrlo lenio contractor.tt cross site scripting](https://agentprime.io/advisories/CVE-2021-4255.md)
  `CVE-2021-4255` · CVE record: ctrlo lenio · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [ctrlo lenio Notice main.tt cross site scripting](https://agentprime.io/advisories/CVE-2021-4254.md)
  `CVE-2021-4254` · CVE record: ctrlo lenio · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [ctrlo lenio Ticket Lenio.pm cross site scripting](https://agentprime.io/advisories/CVE-2021-4253.md)
  `CVE-2021-4253` · CVE record: ctrlo lenio · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [WP-Ban ban-options.php toggle_checkbox cross site scripting](https://agentprime.io/advisories/CVE-2021-4252.md)
  `CVE-2021-4252` · CVE record: unspecified WP-Ban · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [as include.cdn.php getFullURL cross site scripting](https://agentprime.io/advisories/CVE-2021-4251.md)
  `CVE-2021-4251` · CVE record: unspecified as · CVSS 3.5 Low · Not analysed yet · Published 18 Dec 2022 · Tags: CWE-707
- [mschaef toto Email Parameter cross site scripting](https://agentprime.io/advisories/CVE-2022-4591.md)
  `CVE-2022-4591` · CVE record: mschaef toto · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [mschaef toto Todo List cross site scripting](https://agentprime.io/advisories/CVE-2022-4590.md)
  `CVE-2022-4590` · CVE record: mschaef toto · CVSS 3.5 Low · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707
- [Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting](https://agentprime.io/advisories/CVE-2022-4587.md)
  `CVE-2022-4587` · CVE record: Opencaching Deutschland oc-server3 · CVSS 4.3 Medium · Not analysed yet · Published 17 Dec 2022 · Tags: CWE-707

Newest: <https://agentprime.io/advisories/tag/cwe-707.md>
Older: <https://agentprime.io/advisories/tag/cwe-707.md?cursor=WyIyMDIyLTEyLTE3VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00NTg3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-707&cursor=WyIyMDI0LTExLTA0VDIyOjMxOjA0LjM5OTAwMFoiLCJDVkUtMjAyNC0xMDgwNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-707/?cursor=WyIyMDI0LTExLTA0VDIyOjMxOjA0LjM5OTAwMFoiLCJDVkUtMjAyNC0xMDgwNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.