CWE-149
Improper Neutralization of Quoting Syntax
Quotes injected into a product can be used to compromise a system. As data are parsed, an injected/absent/duplicate/malformed use of quotes may cause the process to take unexpected actions.
Impactr finds and proves whether CWE-149 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.