CWE-707 对消息或数据结构的处理不恰当 类弱点 194 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-707属于数据验证类漏洞，指产品未确保结构化消息或数据在传输前后保持格式正确及满足安全属性。攻击者常利用此缺陷，通过构造畸形输入导致数据被错误解析，从而引发注入攻击或逻辑绕过。开发者应实施严格的输入输出验证机制，确保所有结构化数据在读写前经过规范化处理，以消除格式异常带来的安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-3972 | HMS-PHP 安全漏洞 — HMS-PHP | 7.3 | High | 2022-11-13 |
| CVE-2022-3973 | HMS-PHP 安全漏洞 — HMS-PHP | 7.3 | High | 2022-11-13 |
| CVE-2022-3975 | Vinades NukeViet 安全漏洞 — CMS | 3.5 | Low | 2022-11-13 |
| CVE-2022-3963 | GNUBOARD5 跨站脚本漏洞 — gnuboard5 | 3.5 | Low | 2022-11-12 |
| CVE-2022-3941 | WordPress Plugin Zoho Activity Log 安全漏洞 — Activity Log Plugin | 5.3 | Medium | 2022-11-11 |
| CVE-2022-3942 | HP 多款产品跨站脚本漏洞 — Sanitization Management System | 4.3 | Medium | 2022-11-11 |
| CVE-2022-3943 | ForU CMS 跨站脚本漏洞 — CMS | 3.5 | Low | 2022-11-11 |
| CVE-2022-3947 | Eolinker SQL注入漏洞 — goku_lite | 6.3 | Medium | 2022-11-11 |
| CVE-2022-3948 | Eolinker SQL注入漏洞 — goku_lite | 6.3 | Medium | 2022-11-11 |
| CVE-2022-3949 | Simple Cashiering System 跨站脚本漏洞 — Simple Cashiering System | 3.5 | Low | 2022-11-11 |
| CVE-2022-3950 | PublicCMS 跨站脚本漏洞 — PublicCMS | 3.5 | Low | 2022-11-11 |
| CVE-2022-3955 | crm42 SQL注入漏洞 — crm42 | 7.3 | High | 2022-11-11 |
| CVE-2022-3956 | HHIMS SQL注入漏洞 — HHIMS | 6.3 | Medium | 2022-11-11 |
| CVE-2022-3878 | Maxon ERP SQL注入漏洞 — ERP | 7.3 | High | 2022-11-07 |
| CVE-2022-3868 | Sanitization Management System 安全漏洞 — Sanitization Management System | 4.7 | Medium | 2022-11-05 |
| CVE-2020-36608 | Zenario CMS 跨站脚本漏洞 — Zenario CMS | 3.5 | Low | 2022-11-02 |
| CVE-2022-3825 | Huaxia ERP 安全漏洞 — ERP | 6.3 | Medium | 2022-11-02 |
| CVE-2022-3827 | Centreon 安全漏洞 — centreon | 6.3 | Medium | 2022-11-02 |
| CVE-2022-3845 | phpIPAM 跨站脚本漏洞 — phpipam | 2.4 | Low | 2022-11-02 |
| CVE-2022-3789 | Tim Campus Confession Wall SQL注入漏洞 — Confession Wall | 5.5 | Medium | 2022-11-01 |
| CVE-2022-3798 | IBAX go-ibax SQL注入漏洞 — go-ibax | 6.3 | Medium | 2022-11-01 |
| CVE-2022-3799 | IBAX go-ibax SQL注入漏洞 — go-ibax | 6.3 | Medium | 2022-11-01 |
| CVE-2022-3800 | IBAX go-ibax SQL注入漏洞 — go-ibax | 6.3 | Medium | 2022-11-01 |
| CVE-2022-3801 | IBAX go-ibax SQL注入漏洞 — go-ibax | 6.3 | Medium | 2022-11-01 |
| CVE-2022-3802 | IBAX go-ibax SQL注入漏洞 — go-ibax | 6.3 | Medium | 2022-11-01 |
| CVE-2022-3803 | apinto-dashboard 跨站脚本漏洞 — apinto-dashboard | 3.5 | Low | 2022-11-01 |
| CVE-2022-3804 | apinto-dashboard 跨站脚本漏洞 — apinto-dashboard | 4.3 | Medium | 2022-11-01 |
| CVE-2022-3783 | node-red-dashboard 跨站脚本漏洞 — node-red-dashboard | 3.5 | Low | 2022-10-31 |
| CVE-2022-3729 | seccome Ehoney 安全漏洞 — Ehoney | 6.3 | Medium | 2022-10-28 |
| CVE-2022-3730 | seccome Ehoney 安全漏洞 — Ehoney | 6.3 | Medium | 2022-10-28 |
CWE-707（对消息或数据结构的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 194 条 CVE 漏洞。