CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,516 vulnerabilities with CWE-74
CVE-2026-6038 HIGH
code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection
CVSS 7.3
CVE-2026-6037 HIGH
code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection
CVSS 7.3
CVE-2026-6036 HIGH
code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
CVSS 7.3
CVE-2026-6033 MEDIUM
CodeAstro Online Classroom updatedetailsfromstudent.php sql injection
CVSS 6.3
CVE-2026-6031 HIGH
code-projects Simple IT Discussion Forum add-category-function.php sql injection
CVSS 7.3
CVE-2026-6030 MEDIUM
itsourcecode Construction Management System del1.php sql injection
CVSS 6.3
CVE-2026-6010 MEDIUM
CodeAstro Online Classroom takeassessment2.php sql injection
CVSS 6.3
CVE-2026-6007 MEDIUM
itsourcecode Construction Management System del.php sql injection
CVSS 6.3
CVE-2026-6006 MEDIUM
code-projects Patient Record Management System edit_hpatient.php sql injection
CVSS 6.3
CVE-2026-6005 MEDIUM
code-projects Patient Record Management System hematology_print.php sql injection
CVSS 6.3
CVE-2026-6004 HIGH
code-projects Simple IT Discussion Forum delete-category.php sql injection
CVSS 7.3
CVE-2026-5985 HIGH
code-projects Simple IT Discussion Forum crud.php sql injection
CVSS 7.3
CVE-2026-5970 HIGH
FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection
CVSS 7.3
CVE-2026-5961 HIGH
code-projects Simple IT Discussion Forum topic-details.php sql injection
CVSS 7.3
CVE-2026-5848 MEDIUM
jeecgboot JimuReport Data Source testConnection DriverManager.getConnection code injection
CVSS 4.7
CVE-2026-5840 MEDIUM
PHPGurukul News Portal Project check_availability.php sql injection
CVSS 4.7
CVE-2026-5839 MEDIUM
PHPGurukul News Portal Project add-subcategory.php sql injection
CVSS 4.7
CVE-2026-5838 MEDIUM
PHPGurukul News Portal Project add-subadmins.php sql injection
CVSS 4.7
CVE-2026-5837 HIGH
PHPGurukul News Portal Project news-details.php sql injection
CVSS 7.3
CVE-2026-5833 MEDIUM
awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection
CVSS 5.3
CVE-2026-5829 HIGH
code-projects Simple IT Discussion Forum content.php sql injection
CVSS 7.3
CVE-2026-5828 HIGH
code-projects Simple IT Discussion Forum addcomment.php sql injection
CVSS 7.3
CVE-2026-5827 HIGH
code-projects Simple IT Discussion Forum question-function.php sql injection
CVSS 7.3
CVE-2026-5824 HIGH
code-projects Simple Laundry System userchecklogin.php sql injection
CVSS 7.3
CVE-2026-5823 MEDIUM
itsourcecode Construction Management System borrowed_tool_report.php sql injection
CVSS 6.3
Details
Vulnerabilities 4,516
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits