Weaknesses of type CWE-78

5,001 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2023-33012HIGHA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX EPSS 9.9%CVE-2023-7116MEDIUMWeiYe-Jing datax-web HTTP POST Request killJob os command injectionEPSS 9.8%CVE-2019-1674HIGHCisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection VulnerabilityEPSS 9.8%CVE-2018-25120CRITICALD-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_TestEPSS 9.8%CVE-2024-6184MEDIUMRuijie RG-UAC reboot_commit.php os command injectionEPSS 9.7%CVE-2023-6304HIGHTecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injectionEPSS 9.5%CVE-2025-34102CRITICALCryptoLog Unauthenticated RCE via SQL Injection and Command InjectionEPSS 9.5%CVE-2022-36962HIGHSolarWinds Platform Command InjectionEPSS 9.4%CVE-2026-25622HIGHArista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionEPSS 9.3%CVE-2026-25620HIGHArista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionEPSS 9.3%CVE-2025-6485MEDIUMTOTOLINK A3002R formWlSiteSurvey os command injectionEPSS 9.3%CVE-2023-5683MEDIUMByzoro Smart S85F Management Platform importconf.php os command injectionEPSS 9.3%CVE-2019-25441CRITICALthesystem 1.0 Command Injection via run_command endpointEPSS 9.3%CVE-2026-28287HIGHFreePBX: Authenticated Remote Code Execution via Recordings Module AJAX EndpointsEPSS 9.3%CVE-2025-34322HIGHNagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language QueriesEPSS 9.2%CVE-2024-34921HIGHTOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.EPSS 9.2%CVE-2025-10442MEDIUMTenda AC9/AC15 exeCommand formexeCommand os command injectionEPSS 9.2%CVE-2024-6185MEDIUMRuijie RG-UAC commit.php get_ip_addr_details os command injectionEPSS 9.1%CVE-2024-5336MEDIUMRuijie RG-UAC vlan_add_commit.php addVlan os command injectionEPSS 9.0%CVE-2024-5337MEDIUMRuijie RG-UAC user_commit.php os command injectionEPSS 9.0%