Weaknesses of type CWE-78

5,018 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2024-4816MEDIUMRuijie RG-UAC gre_add_commit.php os command injectionEPSS 6.4%CVE-2024-4814MEDIUMRuijie RG-UAC static_route_edit_commit.php os command injectionEPSS 6.4%CVE-2023-3607MEDIUMkodbox WebConsole Plug-In webconsole.php.txt Execute os command injectionEPSS 6.4%CVE-2026-2081MEDIUMD-Link DIR-823X set_password os command injectionEPSS 6.4%CVE-2024-29224CRITICALAn OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary coEPSS 6.3%CVE-2013-10060CRITICALNetgear Routers pppoe.cgi RCEEPSS 6.3%CVE-2021-4473CRITICALTianxin Internet Behavior Management System Command Injection via toQuery.phpEPSS 6.3%CVE-2026-28517CRITICALopenDCIM <= 23.04 OS Command Injection via dot Configuration ParameterEPSS 6.3%CVE-2026-111215HIGHNetgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent InterfaceEPSS 6.2%CVE-2025-34095CRITICALMako Server v2.5 and v2.6 OS Command Injection via examples/save.lspEPSS 6.2%CVE-2026-111225LOWNetgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.shEPSS 6.2%CVE-2022-43325CRITICALAn unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.*EPSS 6.2%CVE-2024-24329CRITICALTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortFEPSS 6.2%CVE-2024-24328HIGHTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFiEPSS 6.2%CVE-2025-3816MEDIUMwestboy CicadasCMS Scheduled Task save os command injectionEPSS 6.2%CVE-2026-8272MEDIUMD-Link DNS-320 webfile_mgr.cgi chown os command injectionEPSS 6.1%CVE-2026-110908HIGHNetgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR sEPSS 6.1%CVE-2013-10061HIGHNetgear Routers setup.cgi RCEEPSS 6.1%CVE-2026-2042HIGHNagios Host monitoringwizard Command Injection Remote Code Execution VulnerabilityEPSS 6.1%CVE-2023-28381HIGHAn OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A speEPSS 6.1%