CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,808 vulnerabilities with CWE-74
CVE-2025-0532 MEDIUM
Codezips Gym Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0531 MEDIUM
code-projects Chat System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0528 HIGH
Tenda AC8,AC10,AC18 16.03.10.20 - Command Injection
CVSS 7.2
CVE-2025-0527 HIGH
code-projects Admission Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-0491 MEDIUM
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0490 MEDIUM
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0489 MEDIUM
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0488 MEDIUM
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0487 MEDIUM
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0486 HIGH
Fanli2012 native-php-cms 1.0 - SQL Injection
CVSS 7.3
CVE-2025-0462 MEDIUM
Shanghai Lingdang Information Technology Lingdang CRM <= 8.6.0.0 - SQL Injection via searchcontent Parameter
CVSS 6.3
CVE-2025-0410 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0409 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0408 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0407 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0406 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0405 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0404 MEDIUM
liujianview gymxmjpa 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0396 HIGH
exelban stats <2.11.21 - Command Injection
CVSS 7.8
CVE-2025-0392 MEDIUM
Guangzhou Huayi Intelligent Technology Jeewms < 2025-01-01 - SQL Injection via datagridGraph Function
CVSS 6.3
CVE-2025-0391 MEDIUM
Guangzhou Huayi Intelligent Technology Jeewms < 2025-01-01 - SQL Injection
CVSS 6.3
CVE-2025-0347 HIGH
code-projects Admission Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-0345 MEDIUM
leiyuxi cy-fast 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0344 MEDIUM
leiyuxi cy-fast 1.0 - SQL Injection
CVSS 6.3
CVE-2025-0340 HIGH
Cinema Seat Reservation System 1.0 - SQL Injection
CVSS 7.3
Details
Vulnerabilities 4,808
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits