CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,807 vulnerabilities with CWE-74
CVE-2025-5626 HIGH
Campcodes Online Teacher Record Management System 1.0 - SQL Injection via editid Parameter
CVSS 7.3
CVE-2025-5625 HIGH
Campcodes Online Teacher Record Management System 1.0 - SQL Injection via searchteacher Parameter
CVSS 7.3
CVE-2025-5618 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via teamid Parameter
CVSS 6.3
CVE-2025-5617 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via teamid Parameter
CVSS 6.3
CVE-2025-5616 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via mobilenumber Parameter
CVSS 6.3
CVE-2025-5615 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via requestid Parameter
CVSS 6.3
CVE-2025-5614 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via searchdata Parameter
CVSS 6.3
CVE-2025-5613 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via requestid Parameter
CVSS 6.3
CVE-2025-5612 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection via Reporting Fullname Parameter
CVSS 6.3
CVE-2025-5611 MEDIUM
CodeAstro Real Estate Management System 1.0 - SQL Injection via /submitpropertyupdate.php ID Parameter
CVSS 6.3
CVE-2025-5610 MEDIUM
CodeAstro Real Estate Management System 1.0 - SQL Injection via /submitpropertydelete.php ID Parameter
CVSS 6.3
CVE-2025-5606 MEDIUM
Tenda AC18 15.03.05.05 - OS Command Injection via formSetIptv
CVSS 6.3
CVE-2025-5604 HIGH
Campcodes Hospital Management System 1.0 - SQL Injection via Username Parameter in /user-login.php
CVSS 7.3
CVE-2025-5603 HIGH
Campcodes Hospital Management System 1.0 - SQL Injection via Registration Full Name/Username Parameter
CVSS 7.3
CVE-2025-5602 HIGH
Campcodes Hospital Management System 1.0 - SQL Injection via Admin Registration Full Name Parameter
CVSS 7.3
CVE-2025-5599 HIGH
PHPGurukul Student Result Management System 1.3 - SQL Injection
CVSS 7.3
CVE-2025-5583 HIGH
CodeAstro Real Estate Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5582 MEDIUM
CodeAstro Real Estate Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-5581 HIGH
CodeAstro Real Estate Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5580 HIGH
CodeAstro Real Estate Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5579 HIGH
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 7.3
CVE-2025-5578 HIGH
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 7.3
CVE-2025-5577 HIGH
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 7.3
CVE-2025-5576 HIGH
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 7.3
CVE-2025-5575 HIGH
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 7.3
Details
Vulnerabilities 4,807
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits