CWE-74
High likelihoodImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
4,983 vulnerabilities with CWE-74
CVE-2026-14648
HIGH
code-projects Online Voting System Login authentication.php test_input sql injection
CVSS 7.3
CVE-2026-14642
HIGH
SourceCodester Class and Exam Timetabling System edit_class2.php sql injection
CVSS 7.3
CVE-2026-14641
HIGH
SourceCodester Class and Exam Timetabling System edit_course.php sql injection
CVSS 7.3
CVE-2026-14640
HIGH
CodeAstro Apartment Visitor Management System Login index.php sql injection
CVSS 7.3
CVE-2026-14639
MEDIUM
CodeAstro Ecommerce Website my_account.php sql injection
CVSS 6.3
CVE-2026-14638
MEDIUM
itsourcecode Hospital Management System patient.php sql injection
CVSS 6.3
CVE-2026-14619
MEDIUM
itsourcecode Hospital Management System medicine.php sql injection
CVSS 6.3
CVE-2026-14249
HIGH
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter
CVSS 7.5
CVE-2026-13579
MEDIUM
itsourcecode Hospital Management System patientchangepassword.php sql injection
CVSS 6.3
CVE-2026-13578
MEDIUM
itsourcecode Hospital Management System patientdetail.php sql injection
CVSS 6.3
CVE-2026-13572
MEDIUM
itsourcecode Hospital Management System insertbillingrecord.php sql injection
CVSS 6.3
CVE-2026-13569
MEDIUM
weng-xianhu EyouCMS API index.php sql injection
CVSS 4.7
CVE-2026-13566
HIGH
SourceCodester Class and Exam Timetabling System preview3.php sql injection
CVSS 7.3
CVE-2026-13565
HIGH
SourceCodester Class and Exam Timetabling System edit_class1.php sql injection
CVSS 7.3
CVE-2026-13559
HIGH
code-projects Real State Services single-list_sale.php add sql injection
CVSS 7.3
CVE-2026-13555
HIGH
itsourcecode Online Hotel Management System controller.php add sql injection
CVSS 7.3
CVE-2026-13552
HIGH
itsourcecode Online Hotel Management System controller.php edit sql injection
CVSS 7.3
CVE-2026-13551
HIGH
itsourcecode Baptism Information Management System editBaptism.php sql injection
CVSS 7.3
CVE-2026-13550
HIGH
itsourcecode Baptism Information Management System delbaptism.php sql injection
CVSS 7.3
CVE-2026-13548
MEDIUM
itsourcecode Hospital Management System doctortimings.php sql injection
CVSS 6.3
CVE-2026-13542
MEDIUM
itsourcecode Hospital Management System doctorprofile.php sql injection
CVSS 6.3
CVE-2026-13541
MEDIUM
itsourcecode Hospital Management System doctorchangepassword.php sql injection
CVSS 6.3
CVE-2026-13538
MEDIUM
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
CVSS 6.3
CVE-2026-13535
MEDIUM
CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection
CVSS 6.3
CVE-2026-13532
MEDIUM
itsourcecode Hospital Management System departmentDoctor.php sql injection
CVSS 6.3
Details
Vulnerabilities
4,983
Exploit Likelihood
High