CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,808 vulnerabilities with CWE-74
CVE-2025-5298 HIGH
Campcodes Online Hospital Management System 1.0 - SQL Injection via fromdate/todate Parameter
CVSS 7.3
CVE-2025-5252 HIGH
PHPGurukul News Portal Project 4.1 - SQL Injection via emailid Parameter
CVSS 7.3
CVE-2025-5251 HIGH
PHPGurukul News Portal Project 4.1 - SQL Injection via Category Parameter in edit-subcategory.php
CVSS 7.3
CVE-2025-5250 HIGH
PHPGurukul News Portal Project 4.1 - SQL Injection via Category Argument in Edit Category
CVSS 7.3
CVE-2025-5249 HIGH
PHPGurukul News Portal Project 4.1 - SQL Injection via Category Parameter in add-category.php
CVSS 7.3
CVE-2025-5248 HIGH
PHPGurukul Company Visitor Management System 1.0 - SQL Injection via fromdate/todate Parameter
CVSS 7.3
CVE-2025-5246 HIGH
Campcodes Online Hospital Management System 1.0 - SQL Injection via adminremark Parameter
CVSS 7.3
CVE-2025-5232 MEDIUM
PHPGurukul Student Study Center Management System 1.0 - SQL Injection via Report Date Parameters
CVSS 4.7
CVE-2025-5231 HIGH
PHPGurukul Company Visitor Management System 1.0 - SQL Injection via Forgot Password Email Parameter
CVSS 7.3
CVE-2025-5230 HIGH
PHPGurukul Online Nurse Hiring System 1.0 - SQL Injection via fromdate/todate Argument
CVSS 7.3
CVE-2025-5229 HIGH
Campcodes Online Hospital Management System 1.0 - SQL Injection via viewid Parameter
CVSS 7.3
CVE-2025-5227 HIGH
PHPGurukul Small CRM 3.0 - SQL Injection via aremark Parameter
CVSS 7.3
CVE-2025-5226 HIGH
PHPGurukul Small CRM 3.0 - SQL Injection via oldpass Parameter
CVSS 7.3
CVE-2025-5225 HIGH
Campcodes Advanced Online Voting System 1.0 - SQL Injection via Voter Parameter
CVSS 7.3
CVE-2025-5224 HIGH
Campcodes Online Hospital Management System 1.0 - SQL Injection via Doctorspecialization Parameter
CVSS 7.3
CVE-2025-5216 HIGH
PHPGurukul Student Record System 3.20 - SQL Injection via /login.php ID Parameter
CVSS 7.3
CVE-2025-5214 HIGH
Kashipara Responsive Online Learning Platform 1.0 - SQL Injection via ID Parameter
CVSS 7.3
CVE-2025-5213 HIGH
Responsive E-Learning System 1.0 - SQL Injection via /admin/delete_file.php ID Parameter
CVSS 7.3
CVE-2025-5212 HIGH
PHPGurukul Employee Record Management System 1.3 - SQL Injection via emp1name Parameter
CVSS 7.3
CVE-2025-5211 HIGH
PHPGurukul Employee Record Management System 1.3 - SQL Injection via EmpCode Parameter
CVSS 7.3
CVE-2025-5210 HIGH
PHPGurukul Employee Record Management System 1.3 - SQL Injection via Email Parameter in loginerms.php
CVSS 7.3
CVE-2025-5208 HIGH
Online Hospital Management System 1.0 - SQL Injection via Email Parameter in check_availability.php
CVSS 7.3
CVE-2025-5207 MEDIUM
Client Database Management System 1.0 - SQL Injection via /superadmin_update_profile.php Nickname/Email Parameter
CVSS 4.7
CVE-2025-5206 MEDIUM
Pixelimity 1.0 - SQL Injection via /install/index.php site_description Parameter
CVSS 4.7
CVE-2025-5205 HIGH
1000 Projects Daily College Class Work Report Book 1.0 - SQL Injection via Date Parameter in /dcwr_entry.php
CVSS 7.3
Details
Vulnerabilities 4,808
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits