CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,983 vulnerabilities with CWE-74
CVE-2026-14772 HIGH
SourceCodester Class and Exam Timetabling System edit_course1.php sql injection
CVSS 7.3
CVE-2026-14771 HIGH
SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection
CVSS 7.3
CVE-2026-14770 HIGH
SourceCodester Class and Exam Timetabling System edit_room.php sql injection
CVSS 7.3
CVE-2026-14769 HIGH
code-projects Real State Services pay.php sql injection
CVSS 7.3
CVE-2026-14768 HIGH
code-projects Real State Services builderHome.php sql injection
CVSS 7.3
CVE-2026-14767 MEDIUM
CodeAstro Ecommerce Website POST Parameter confirm.php sql injection
CVSS 6.3
CVE-2026-14766 MEDIUM
CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection
CVSS 6.3
CVE-2026-14764 HIGH
code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection
CVSS 7.3
CVE-2026-14763 HIGH
code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection
CVSS 7.3
CVE-2026-14762 HIGH
code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection
CVSS 7.3
CVE-2026-14756 HIGH
code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection
CVSS 7.3
CVE-2026-14755 HIGH
code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection
CVSS 7.3
CVE-2026-14754 HIGH
code-projects Hotel and Tourism Reservation add_room.php sql injection
CVSS 7.3
CVE-2026-14751 MEDIUM
mjperpinosa stumasy search_scratch_data.php search_scratch_data sql injection
CVSS 6.3
CVE-2026-14750 HIGH
mjperpinosa stumasy accessing_dictionary_authorization.php accessing_dictionary_authorization sql injection
CVSS 7.3
CVE-2026-14749 HIGH
mjperpinosa stumasy calculate.php eval code injection
CVSS 7.3
CVE-2026-14747 HIGH
code-projects Real State Services addprojectsale.php sql injection
CVSS 7.3
CVE-2026-14746 HIGH
code-projects Real State Services addprojectrent.php sql injection
CVSS 7.3
CVE-2026-14745 HIGH
code-projects Real State Services single-list_rent.php sql injection
CVSS 7.3
CVE-2026-14744 HIGH
code-projects Real State Services normalHomeRent.php sql injection
CVSS 7.3
CVE-2026-14743 HIGH
code-projects Real State Services normalHomeSale.php sql injection
CVSS 7.3
CVE-2026-14737 HIGH
Hanwang e-Face General Management Platform querySysAuthStr.do sql injection
CVSS 7.3
CVE-2026-14735 HIGH
code-projects Smart Parking System parkings.php sql injection
CVSS 7.3
CVE-2026-14734 HIGH
SourceCodester Class and Exam Timetabling System edit_product.php sql injection
CVSS 7.3
CVE-2026-14733 HIGH
SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection
CVSS 7.3
Details
Vulnerabilities 4,983
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits