Sign in Sign up
JA · EN · FR
SecPulse

Cwe 78

🧬 CWE Related 2,028
slug: cwe-78

Explanation

CWE-78は「ユーザー入力をシェルコマンドの一部として使うとき、適切にエスケープせず、攻撃者がコマンドを追加実行できてしまう欠陥」のことです。 例えば `ping {ユーザー入力IP}` の {ユーザー入力IP} に `; rm -rf /` のような文字列を入れられると、サーバー上のファイルが削除されます。 対策は「シェル経由を避け、引数を配列として直接渡す (PHPなら escapeshellarg)」。
📌 Example
Shellshock (CVE-2014-6271): Bashの脆弱性で、Webサーバーへの普通のリクエスト経由で任意のシェルコマンドが実行できた歴史的な事件。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,033

Image ID Title
CVE-2025-68459 RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command…
CVE-2025-68109 OS Command Injection in ChurchCRM (CVE-2025-68109)
CVE-2025-67172 OS Command Injection in RiteCMS (CVE-2025-67172)
CVE-2025-67164 OS Command Injection in Pagekit CMS (CVE-2025-67164)
CVE-2025-68154 OS Command Injection in Microsoft Windows (CVE-2025-68154)
CVE-2025-14586 Command Injection in TOTOLINK X5000R (CVE-2025-14586)
CVE-2024-14010 OS Command Injection in Typora (CVE-2024-14010)
CVE-2024-58286 OS Command Injection in dizqueTV (CVE-2024-58286)
CVE-2025-13481 OS Command Injection in IBM Aspera Orchestrator (CVE-2025-13481)
CVE-2025-56129 OS Command Injection in Ruijie (CVE-2025-56129)
CVE-2025-56130 OS Command Injection in Ruijie (CVE-2025-56130)
CVE-2025-56123 OS Command Injection in Ruijie (CVE-2025-56123)
CVE-2025-56114 OS Command Injection in Ruijie (CVE-2025-56114)
CVE-2025-56117 OS Command Injection in Ruijie (CVE-2025-56117)
CVE-2025-56118 OS Command Injection in Ruijie (CVE-2025-56118)
CVE-2025-56120 OS Command Injection in Ruijie (CVE-2025-56120)
CVE-2025-56122 OS Command Injection in Ruijie (CVE-2025-56122)
CVE-2025-56124 OS Command Injection in Ruijie (CVE-2025-56124)
CVE-2025-56127 OS Command Injection in Ruijie (CVE-2025-56127)
CVE-2025-56102 OS Command Injection in Ruijie (CVE-2025-56102)
CVE-2025-56106 OS Command Injection in Ruijie (CVE-2025-56106)
CVE-2025-56107 OS Command Injection in Ruijie (CVE-2025-56107)
CVE-2025-56108 OS Command Injection in Ruijie (CVE-2025-56108)
CVE-2025-56109 OS Command Injection in Ruijie (CVE-2025-56109)
CVE-2025-56110 OS Command Injection in Ruijie (CVE-2025-56110)
CVE-2025-56111 OS Command Injection in Ruijie (CVE-2025-56111)
CVE-2025-56113 OS Command Injection in Ruijie RG-YST EST (CVE-2025-56113)
CVE-2025-56092 OS Command Injection in Ruijie (CVE-2025-56092)
CVE-2025-56095 OS Command Injection in Ruijie (CVE-2025-56095)
CVE-2025-56093 OS Command Injection in Ruijie (CVE-2025-56093)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details