CWE-88


Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.


We have discovered 664 live websites that are affected by CWE-88.

Contact us to get more info









CVEs

  • Count - 2



Website Distribution by Country

Number of websites using CWE-88
United States159 websites



Germany171 websites
Singapore69 websites
France68 websites
GB30 websites
Russia15 websites
Switzerland14 websites
Netherlands14 websites
Denmark12 websites
Austria8 websites

Website Distribution by TLD

Number of websites using CWE-88
.org163 websites
.com148 websites
.de71 websites
.net68 websites
.ru12 websites
.fr12 websites
.eu8 websites
.ch8 websites
.org.uk8 websites
.dk8 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-88
DiscoveredCVEDescriptionWebsites
Jul, 2025CVE-2025-48385 Git alllows arbitrary file writes via bundle-uri parameter injection552
Aug, 2024CVE-2024-7573 Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection112
List of the most common CVEs that are part of CWE-88
DiscoveredCVEDescriptionWebsites
Jul, 2025CVE-2025-48385 Git alllows arbitrary file writes via bundle-uri parameter injection552
Aug, 2024CVE-2024-7573 Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection112

Websites affected by CWE-88

Top websites that are affected by CWE-88. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.***********.org United States**,***
***.******.org United States**,***
****.**.cz Germany**,***
***.********.org France**,***
****.**.io Finland***,***
***.**********.org Austria***,***
***.********.org United States***,***
***.*****.org Germany***,***
*******.org France***,***
***.*****.com United States***,***
See full domain list