CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,984 vulnerabilities with CWE-74
CVE-2026-7678 MEDIUM
YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection
CVSS 6.3
CVE-2026-7672 MEDIUM
youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection
CVSS 6.3
CVE-2026-7670 HIGH
Jinher OA UserSel.aspx sql injection
CVSS 7.3
CVE-2026-7669 MEDIUM
sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer deserialization
CVSS 5.6
CVE-2026-7632 HIGH
code-projects Online Hospital Management System viewappointment.php sql injection
CVSS 7.3
CVE-2026-7629 MEDIUM
kleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection
CVSS 6.3
CVE-2026-7628 MEDIUM
crazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection
CVSS 6.3
CVE-2026-7612 MEDIUM
itsourcecode Courier Management System edit_user.php sql injection
CVSS 4.7
CVE-2026-7595 MEDIUM
nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection
CVSS 6.3
CVE-2026-7592 HIGH
itsourcecode Courier Management System edit_staff.php sql injection
CVSS 7.3
CVE-2026-7591 MEDIUM
TimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injection
CVSS 6.3
CVE-2026-7580 MEDIUM
Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection
CVSS 5.3
CVE-2026-7555 HIGH
itsourcecode Electronic Judging System login.php sql injection
CVSS 7.3
CVE-2026-7553 MEDIUM
code-projects Gym Management System edit_exercises.php sql injection
CVSS 4.7
CVE-2026-7550 HIGH
SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection
CVSS 7.3
CVE-2026-7549 HIGH
SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection
CVSS 7.3
CVE-2026-7548 HIGH
Totolink NR1800X cstecgi.cgi sub_41A68C command injection
CVSS 8.8
CVE-2026-7545 HIGH
SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection
CVSS 7.3
CVE-2026-7508 MEDIUM
Bootstrap CMS Page Creation show.blade.php code injection
CVSS 6.3
CVE-2026-7506 HIGH
SourceCodester Hotel Management System check sql injection
CVSS 7.3
CVE-2026-7469 MEDIUM
Tenda 4G300 DelFil sub_425A28 command injection
CVSS 6.3
CVE-2026-7447 MEDIUM
SourceCodester Pet Grooming Management Software update_customer.php sql injection
CVSS 6.3
CVE-2026-7410 MEDIUM
SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection
CVSS 6.3
CVE-2026-7409 MEDIUM
SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection
CVSS 4.7
CVE-2026-7408 MEDIUM
SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection
CVSS 4.7
Details
Vulnerabilities 4,984
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits