CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
baseThe product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (593)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86060US | critical9.8OT critical | KEV | ||
RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be ch… | ||||
| CVE-2026-24061US | —OT critical | KEV | ||
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. | ||||
| CVE-2024-41710US | high7.2OT critical | KEV | ||
A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticated… | ||||
| CVE-2024-4577US | critical9.8OT critical | KEV | ||
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows m… | ||||
| CVE-2022-36804US | high8.8OT critical | KEV | ||
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21… | ||||
| CVE-2016-10033US | critical9.8OT critical | KEV | ||
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrar… | ||||
| CVE-2007-0882US | high10.0 | Exploit | ||
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the… | ||||
| CVE-2018-17456US | critical9.8 | Exploit | ||
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing o… | ||||
| CVE-2021-33564US | critical9.8 | Exploit | ||
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url op… | ||||
| CVE-2018-19518US | high7.5 | Exploit | ||
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap… | ||||
| CVE-2022-23221US | critical9.8 | Exploit | ||
H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCR… | ||||
| CVE-2022-36267US | critical9.8 | Exploit | ||
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authent… | ||||
| CVE-2019-6453US | high8.1 | Exploit | ||
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .i… | ||||
| CVE-2020-5792US | high7.2 | Exploit | ||
Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code wit… | ||||
| CVE-2024-24576US | critical10.0 | Exploit | ||
Rust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly escape arguments when invoking ba… | ||||
| CVE-2004-0121US | high7.5 | Exploit | ||
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allo… | ||||
| CVE-2024-52301US | high7.5 | Exploit | ||
Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change… | ||||
| CVE-1999-0113US | high10.0 | Exploit | ||
Some implementations of rlogin allow root access if given a -froot parameter. | ||||
| CVE-2020-13699US | high8.8 | Exploit | ||
TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated… | ||||
| CVE-2024-39930US | critical9.9 | Exploit | ||
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by openi… | ||||
03
attack patterns (5)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan