CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,808 vulnerabilities with CWE-74
CVE-2025-4360 HIGH
Gym Management System 1.0 - SQL Injection via /view_member.php ID Parameter
CVSS 7.3
CVE-2025-46814 LOW
FastAPI Guard <2.0.0 - HTTP Header Injection
CVSS 3.4
CVE-2025-4359 HIGH
Gym Management System 1.0 - SQL Injection via ID Parameter in /ajax.php
CVSS 7.3
CVE-2025-4358 HIGH
PHPGurukul Company Visitor Management System 2.0 - SQL Injection via admin-profile.php
CVSS 7.3
CVE-2025-4357 MEDIUM
Tenda RX3 16.03.13.11_multi - OS Command Injection via /goform/telnet
CVSS 4.7
CVE-2025-4353 MEDIUM
Brilliance Golden Link Secondary System < 2025-04-24 - SQL Injection via dictCn1 Parameter
CVSS 6.3
CVE-2025-4352 MEDIUM
Brilliance Golden Link Secondary System < 2025-04-24 - SQL Injection via custTradeId Parameter
CVSS 6.3
CVE-2025-4350 HIGH
D-Link DIR-600L < 2.07b01 - OS Command Injection via Wake-on-LAN Host Parameter
CVSS 8.8
CVE-2025-4349 HIGH
D-Link DIR-600L < 2.07b01 - Remote Command Injection via formSysCmd host Argument
CVSS 8.8
CVE-2025-4341 MEDIUM
D-Link DIR-880L < 104WWb01 - OS Command Injection via Request Header Handler
CVSS 6.3
CVE-2025-4340 MEDIUM
D-Link DIR-890L and DIR-806A1 < 1.08b03 - OS Command Injection via /htdocs/soap.cgi
CVSS 6.3
CVE-2025-4332 HIGH
PHPGurukul Company Visitor Management System 2.0 - SQL Injection via editid/remark Parameter
CVSS 7.3
CVE-2025-4331 HIGH
Online Student Clearance System 1.0 - SQL Injection via Admin Login Parameters
CVSS 7.3
CVE-2025-4314 HIGH
Advanced Web Store 1.0 - SQL Injection via txtLogin Parameter
CVSS 7.3
CVE-2025-4313 HIGH
Advanced Web Store 1.0 - SQL Injection via txtProdId Parameter
CVSS 7.3
CVE-2025-4312 HIGH
Advanced Web Store 1.0 - SQL Injection via prodid Parameter in productdetail.php
CVSS 7.3
CVE-2025-4311 HIGH
itsourcecode Content Management System 1.0 - SQL Injection via stopic_id Parameter
CVSS 7.3
CVE-2025-4309 HIGH
PHPGurukul Art Gallery Management System 1.1 - SQL Injection via arttype Parameter
CVSS 7.3
CVE-2025-4308 HIGH
PHPGurukul Art Gallery Management System 1.1 - SQL Injection via arttype Parameter in add-art-type.php
CVSS 7.3
CVE-2025-4307 HIGH
PHPGurukul Art Gallery Management System 1.1 - SQL Injection via /admin/add-art-medium.php artmed Parameter
CVSS 7.3
CVE-2025-4306 HIGH
PHPGurukul Nipah Virus Testing Management System 1.0 - SQL Injection via mobilenumber Parameter
CVSS 7.3
CVE-2025-4304 HIGH
PHPGurukul Cyber Cafe Management System 1.0 - SQL Injection via mobilenumber Parameter
CVSS 7.3
CVE-2025-4303 HIGH
PHPGurukul Human Metapneumovirus Testing Management System 1.0 - SQL Injection via empid Parameter
CVSS 7.3
CVE-2025-4301 HIGH
itsourcecode Content Management System 1.0 - SQL Injection via searchdata Parameter in search-notice.php
CVSS 7.3
CVE-2025-4300 HIGH
itsourcecode Content Management System 1.0 - SQL Injection via Search Parameter in search_list.php
CVSS 7.3
Details
Vulnerabilities 4,808
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits