← Back
CWE-78

7,221 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

JSON object

Loading...

CVEs (7,221)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-1999-0067
2Apache
Ncsa
2Http Server
Ncsa Httpd
Apr 16, 2026
Mar 20, 1996
N/A· v4
N/A· v3
10.0 HIGH· v2
phf CGI program allows remote command execution through shell metacharacters.