CWE-74
High likelihoodImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
4,808 vulnerabilities with CWE-74
CVE-2025-1216
MEDIUM
yimioa < 2024-07-04 - SQL Injection via OaNoticeMapper.xml sort Argument
CVSS 6.3
CVE-2025-1210
MEDIUM
Wazifa System 1.0 - SQL Injection via control.php 'to' Parameter
CVSS 6.3
CVE-2025-1206
MEDIUM
Codezips Gym Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-1202
MEDIUM
SourceCodester Best Church Management Software 1.1 - SQL Injection
CVSS 6.3
CVE-2025-1201
MEDIUM
SourceCodester Best Church Management Software 1.1 - SQL Injection
CVSS 6.3
CVE-2025-1200
MEDIUM
SourceCodester Best Church Management Software 1.1 - SQL Injection
CVSS 6.3
CVE-2025-1199
MEDIUM
Best Church Management Software 1.1 - SQL Injection via role_crud.php id Parameter
CVSS 6.3
CVE-2025-1197
MEDIUM
Real Estate Property Management System 1.0 - SQL Injection via userhash Parameter
CVSS 6.3
CVE-2025-1192
MEDIUM
Multi Restaurant Table Reservation System 1.0 - SQL Injection via select-menu.php table parameter
CVSS 6.3
CVE-2025-1191
MEDIUM
Multi Restaurant Table Reservation System 1.0 - SQL Injection via breject_id Parameter
CVSS 6.3
CVE-2025-1189
MEDIUM
1000 Projects Attendance Tracking Management System 1.0 - SQL Injection via course_id Parameter
CVSS 6.3
CVE-2025-1188
MEDIUM
Codezips Gym Management System 1.0 - SQL Injection via /dashboard/admin/updateroutine.php tid Parameter
CVSS 6.3
CVE-2025-1185
MEDIUM
PiHome MaxAir - SQL Injection via /ajax.php GetModal_Sensor_Graph Parameter
CVSS 6.3
CVE-2025-1184
MEDIUM
PiHome 1.77 - SQL Injection via /ajax.php GetModal_MQTTEdit id Parameter
CVSS 6.3
CVE-2025-1183
MEDIUM
CodeZips Gym Management System 1.0 - SQL Injection via login_id Parameter
CVSS 6.3
CVE-2025-1173
MEDIUM
1000 Projects Bookstore Management System 1.0 - SQL Injection via process_users_del.php id Parameter
CVSS 4.7
CVE-2025-1172
MEDIUM
1000 Projects Bookstore Management System 1.0 - SQL Injection via addtocart.php bcid Parameter
CVSS 6.3
CVE-2025-1168
MEDIUM
Contact Manager with Export to VCF 1.0 - SQL Injection via contact Parameter in delete-contact.php
CVSS 6.3
CVE-2025-1167
MEDIUM
Mayuri K Employee Management System <= 192.168.70.3 - SQL Injection via Update_User.php id Parameter
CVSS 6.3
CVE-2025-1162
MEDIUM
Job Recruitment 1.0 - SQL Injection via userhash Parameter in load_user-profile.php
CVSS 6.3
CVE-2025-1158
MEDIUM
ESAFENET CDG 5.6.3.154.205_20250114 - SQL Injection
CVSS 6.3
CVE-2025-1157
MEDIUM
Allims lab.online <20250201 - SQL Injection
CVSS 6.3
CVE-2025-1156
HIGH
Pix Software Vivaz 6.0.10 - SQL Injection
CVSS 7.3
CVE-2025-1154
MEDIUM
xxyopen Novel <3.4.1 - SQL Injection
CVSS 6.3
CVE-2025-1117
HIGH
CoinRemitter <0.0.1/0.0.2 - SQL Injection
CVSS 7.3
Details
Vulnerabilities
4,808
Exploit Likelihood
High