CWE-943
Improper Neutralization of Special Elements in Data Query Logic
The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.
Impactr finds and proves whether CWE-943 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.