CWE-74
High likelihoodImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
4,984 vulnerabilities with CWE-74
CVE-2026-9447
HIGH
SourceCodester Simple POS and Inventory System search.php sql injection
CVSS 7.3
CVE-2026-9446
MEDIUM
SourceCodester Simple POS and Inventory System edit_customer.php sql injection
CVSS 4.7
CVE-2026-9444
MEDIUM
SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection
CVSS 4.7
CVE-2026-9441
MEDIUM
Edimax BR-6478AC POST Request formiNICbasic command injection
CVSS 6.3
CVE-2026-9440
MEDIUM
Edimax BR-6478AC POST Request formAccept command injection
CVSS 6.3
CVE-2026-9439
MEDIUM
Edimax BR-6675nD stainfo command injection
CVSS 6.3
CVE-2026-9423
MEDIUM
Edimax BR-6675nD POST Request mp command injection
CVSS 4.7
CVE-2026-9422
HIGH
KLiK SocialMediaWebsite HTTP POST Request Parameter injection
CVSS 7.3
CVE-2026-9420
MEDIUM
KLiK SocialMediaWebsite HTTP GET Request Parameter injection
CVSS 6.3
CVE-2026-9411
MEDIUM
SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection
CVSS 6.3
CVE-2026-9402
MEDIUM
Edimax BR-6675nD POST Request formWlanMP command injection
CVSS 6.3
CVE-2026-9400
MEDIUM
Edimax BR-6675nD POST Request formUSBStorage command injection
CVSS 6.3
CVE-2026-9383
HIGH
itsourcecode Electronic Judging System login.php sql injection
CVSS 7.3
CVE-2026-9379
MEDIUM
Edimax BR-6675nD POST Request formWpsStart command injection
CVSS 6.3
CVE-2026-9378
MEDIUM
Edimax BR-6675nD POST Request formHwSet command injection
CVSS 6.3
CVE-2026-9366
HIGH
NousResearch hermes-agent prompt_builder.py _scan_context_content injection
CVSS 7.3
CVE-2026-9364
HIGH
projectworlds Online Art Gallery Shop adminHome.php sql injection
CVSS 7.3
CVE-2026-9363
MEDIUM
Edimax EW-7438RPn POST Request formEZCHNwlanSetu formEZCHNwlanSetup command injection
CVSS 6.3
CVE-2026-9362
MEDIUM
Edimax EW-7438RPn Setting formConnectionSetting command injection
CVSS 6.3
CVE-2026-9361
MEDIUM
Edimax EW-7438RPn POST Request formAccep formAccept command injection
CVSS 6.3
CVE-2026-9359
MEDIUM
Edimax EW-7438RPn POST Request formHwSet command injection
CVSS 6.3
CVE-2026-9356
HIGH
SourceCodester Hospitals Patient Records Management System manage_history.php sql injection
CVSS 7.3
CVE-2026-9355
HIGH
SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection
CVSS 7.3
CVE-2026-9354
MEDIUM
NousResearch hermes-agent Slack Agent/Mattermost Agent escape output
CVSS 6.5
CVE-2026-9353
HIGH
NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection
CVSS 7.3
Details
Vulnerabilities
4,984
Exploit Likelihood
High