CWE-698 Execution After Redirect (EAR)
baseThe web application sends a redirect to another location, but instead of exiting, it executes additional code.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (21)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3376US | critical9.8 | — | ||
A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipula… | ||||
| CVE-2024-2573US | critical9.8 | — | ||
A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file /task-info.php. The manipul… | ||||
| CVE-2024-2572US | critical9.8 | — | ||
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /task-details… | ||||
| CVE-2024-2571US | critical9.8 | — | ||
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage-admin… | ||||
| CVE-2024-2570US | critical9.8 | — | ||
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit-task.php. The ma… | ||||
| CVE-2024-2569US | critical9.8 | — | ||
A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-… | ||||
| CVE-2026-3264US | high8.8 | — | ||
A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administr… | ||||
| CVE-2026-3262US | high8.8 | — | ||
A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interfa… | ||||
| CVE-2023-28349US | high8.8 | — | ||
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted program that functions similarly to the Teacher Console. This… | ||||
| CVE-2024-48766US | — | Exploit | ||
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal… | ||||
| CVE-2026-2699US | — | Exploit | ||
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration a… | ||||
| CVE-2025-9848US | high7.5 | — | ||
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such ma… | ||||
| CVE-2026-58455US | — | Exploit | ||
Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing ex… | ||||
| CVE-2026-74049US | — | — | ||
Execution After Redirect (EAR) vulnerability in Apache Tomcat.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 th… | ||||
| CVE-2026-16323US | — | — | ||
Execution after redirect (EAR) vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass.
This issue affects Architect… | ||||
| CVE-2026-61407US | — | — | ||
Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could pote… | ||||
| CVE-2026-10271US | — | — | ||
A flaw has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The affected element is an unknown function of the file admin/ of the compon… | ||||
| CVE-2025-8350US | —OT elevated | — | ||
Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTT… | ||||
| CVE-2025-6967US | — | — | ||
Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hijacking (aka JavaScript Hijacking), Authe… | ||||
| CVE-2025-53077US | — | — | ||
An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan