CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,984 vulnerabilities with CWE-74
CVE-2026-11485 HIGH
SourceCodester Class and Exam Timetabling System archive2.php sql injection
CVSS 7.3
CVE-2026-11484 HIGH
SourceCodester Class and Exam Timetabling System archive3.php sql injection
CVSS 7.3
CVE-2026-11483 HIGH
SourceCodester Class and Exam Timetabling System archive4.php sql injection
CVSS 7.3
CVE-2026-11482 HIGH
SourceCodester Class and Exam Timetabling System archive5.php sql injection
CVSS 7.3
CVE-2026-11480 MEDIUM
Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection
CVSS 6.3
CVE-2026-11475 MEDIUM
Kushan2k student-management-system Certificate Verification Endpoint GradeController.php getStatus sql injection
CVSS 6.3
CVE-2026-11473 MEDIUM
jflyfox jfinal_cms AdvicefeedbackController.java list sql injection
CVSS 6.3
CVE-2026-11472 HIGH
SourceCodester Class and Exam Timetabling System index1.php sql injection
CVSS 7.3
CVE-2026-11471 HIGH
SourceCodester Class and Exam Timetabling System index2.php sql injection
CVSS 7.3
CVE-2026-11457 HIGH
erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection
CVSS 7.3
CVE-2026-11456 HIGH
Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection
CVSS 7.3
CVE-2026-11455 MEDIUM
FoundationAgents MetaGPT common.py check_cmd_exists command injection
CVSS 5.0
CVE-2026-11453 MEDIUM
Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection
CVSS 6.3
CVE-2026-11452 HIGH
GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection
CVSS 7.3
CVE-2026-11451 HIGH
GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection
CVSS 7.3
CVE-2026-11450 HIGH
GL.iNet GL-MT3000 Path Normalization dlopen command injection
CVSS 7.3
CVE-2026-11449 MEDIUM
GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection
CVSS 6.3
CVE-2026-11448 MEDIUM
GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
CVSS 4.7
CVE-2026-11447 MEDIUM
GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection
CVSS 6.3
CVE-2026-11435 HIGH
Jinher OA nextselectplan.aspx sql injection
CVSS 7.3
CVE-2026-11412 MEDIUM
Jinher OA GetFormSn.aspx sql injection
CVSS 6.3
CVE-2026-11406 MEDIUM
GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection
CVSS 6.3
CVE-2026-11342 HIGH
code-projects Hotel and Tourism Reservation System details.php sql injection
CVSS 7.3
CVE-2026-11339 MEDIUM
D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection
CVSS 6.3
CVE-2026-11334 HIGH
tittuvarghese CollegeManagementSystem fetch.php sql injection
CVSS 7.3
Details
Vulnerabilities 4,984
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits