CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,795 vulnerabilities with CWE-74
CVE-2025-11402 MEDIUM
SourceCodester Hotel and Lodge Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11401 MEDIUM
SourceCodester Hotel and Lodge Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11400 MEDIUM
SourceCodester Hotel and Lodge Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11399 MEDIUM
SourceCodester Hotel and Lodge Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11397 HIGH
SourceCodester Hotel and Lodge Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-11396 HIGH
Simple Food Ordering System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-11359 MEDIUM
Simple Banking System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11358 MEDIUM
Code-projects Simple Banking System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11357 MEDIUM
Simple Banking System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-11350 HIGH
Campcodes Online Apartment Visitor Management System 1.0 - SQL Injection via fromdate/todate Parameter
CVSS 7.3
CVE-2025-11349 HIGH
Campcodes Online Apartment Visitor Management System 1.0 - SQL Injection via searchdata Parameter
CVSS 7.3
CVE-2025-11348 HIGH
Campcodes Online Apartment Visitor Management System 1.0 - SQL Injection via Username Parameter
CVSS 7.3
CVE-2025-11344 MEDIUM
ILIAS <= 8.23/9.13/10.1 - Remote Code Execution in Certificate Import Handler
CVSS 6.3
CVE-2025-11343 HIGH
code-projects Student Crud Operation <3.3 - SQL Injection
CVSS 7.3
CVE-2025-11342 MEDIUM
Code-projects Online Course Registration 1.0 - SQL Injection
CVSS 4.7
CVE-2025-11335 MEDIUM
D-Link DI-7100G C1 <20250928 - Command Injection
CVSS 4.7
CVE-2025-11334 HIGH
Campcodes Online Apartment Visitor Management System 1.0 - SQL Injection via editid Parameter
CVSS 7.3
CVE-2025-11331 MEDIUM
ideacms < 1.8 - Remote Command Injection via Website Name Handler
CVSS 4.7
CVE-2025-11330 MEDIUM
PHPGurukul Beauty Parlour Management System 1.1 - SQL Injection
CVSS 6.3
CVE-2025-11329 HIGH
Code-Projects Online Course Registration <1.0 - SQL Injection
CVSS 7.3
CVE-2025-11319 MEDIUM
nahiduddinahammed Hospital-Management-System-Website <e6562429e14b2...
CVSS 6.3
CVE-2025-11317 HIGH
Tipray Data Leakage Prevention System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-11316 HIGH
Tipray Data Leakage Prevention System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-11315 HIGH
Tipray Data Leakage Prevention System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-11314 HIGH
Tipray Data Leakage Prevention System 1.0 - SQL Injection
CVSS 7.3
Details
Vulnerabilities 4,795
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits