CWE-77 - CERT CVE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

CAPEC ID	Naziv
CAPEC-136	LDAP Injection
CAPEC-15	Command Delimiters
CAPEC-183	IMAP/SMTP Command Injection
CAPEC-248	Command Injection
CAPEC-40	Manipulating Writeable Terminal Devices
CAPEC-43	Exploiting Multiple Input Interpretation Layers
CAPEC-75	Manipulating Writeable Configuration Files
CAPEC-76	Manipulating Web Input to File System Calls