CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,808 vulnerabilities with CWE-74
CVE-2025-5176 HIGH
Realce Tecnologia Queue Ticket Kiosk < 2025-05-17 - SQL Injection via Admin Login Page Usurio Parameter
CVSS 7.3
CVE-2025-5172 HIGH
econtrata < 2025-05-16 - SQL Injection via /valida usuario Parameter
CVSS 7.3
CVE-2025-5170 MEDIUM
llisoft MTA Maita Training System 4.5 - SQL Injection via AdminShitiListRequestVo stTypeIds Parameter
CVSS 6.3
CVE-2025-5155 MEDIUM
FoxCMS 1.2.5 - SQL Injection via batchCope Function
CVSS 6.3
CVE-2025-5152 MEDIUM
Chanjet CRM < 20250510 - SQL Injection via gblOrgID Parameter
CVSS 6.3
CVE-2025-5151 MEDIUM
defog introspect < 0.1.4 - Code Injection in execute_analysis_code_safely
CVSS 5.3
CVE-2025-5147 MEDIUM
Netcore NBR1005GPEV2-20250508 - Command Injection
CVSS 6.3
CVE-2025-5146 MEDIUM
Netcore NBR1005GPEV2-20250508 - Command Injection
CVSS 6.3
CVE-2025-5145 MEDIUM
Netcore Multiple Devices < 20250508 - OS Command Injection via Query String
CVSS 6.3
CVE-2025-5139 MEDIUM
Qualitor 8.20/8.24 - Command Injection via nmconexao Argument in Office 365 Connection Handler
CVSS 5.6
CVE-2025-5137 MEDIUM
DedeCMS 5.7.117 - Remote Code Injection via sys_verifies.php refiles Parameter
CVSS 4.7
CVE-2025-5128 HIGH
ScriptAndTools Real-Estate-website-in-PHP 1.0 - SQL Injection via Admin Login Panel Password Argument
CVSS 7.3
CVE-2025-5126 HIGH
FLIR AX8 Firmware 1.46.0-1.46.16 - Remote Command Injection via setDataTime Function
CVSS 8.8
CVE-2025-5119 HIGH
Emlog Pro 2.5.11 - SQL Injection via Tag Parameter in API Controller
CVSS 7.3
CVE-2025-5107 MEDIUM
Fujian Kelixun 1.0 - SQL Injection via uuid Parameter in xml_cdr_details.php
CVSS 6.3
CVE-2025-5081 HIGH
Campcodes Cybercafe Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5079 HIGH
PHPGurukul/Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5078 HIGH
PHPGurukul/Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5077 HIGH
Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5057 HIGH
Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5056 HIGH
Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5032 HIGH
Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2025-20256 MEDIUM
Cisco Secure Network Analytics - RCE
CVSS 6.5
CVE-2025-5008 HIGH
projectworlds Online Time Table Generator 1.0 - SQL Injection
CVSS 7.3
CVE-2025-5006 HIGH
Campcodes Online Shopping Portal 1.0 - SQL Injection
CVSS 7.3
Details
Vulnerabilities 4,808
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits