CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,792 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 21 of 116

CVE-2025-7179CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be…
CVE-2025-7178CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible t…
CVE-2025-7176CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid l…
CVE-2025-7174CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue-book.php. The manipulation of the argument idn leads to sql injection. The atta…
CVE-2025-7173CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student.php. The manipulation of the argument Username leads to sql injection. The atta…
CVE-2025-7172CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability, which was classified as critical, was found in code-projects Crime Reporting System 1.0. This affects an unknown part of the file /headlogin.php. The manipulation of the argument email leads to sql injection. It is possibl…
CVE-2025-7171CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functionality of the file /policelogin.php. The manipulation of the argument email leads …
CVE-2025-7170CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql inje…
CVE-2025-7169CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknown function of the file /complainer_page.php. The manipulation of the argument location leads to sql injection. It is po…
CVE-2025-7168CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /userlogin.php. The manipulation of the argument email leads to sql injection. The…
CVE-2025-7165CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email le…
CVE-2025-7164CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Usernam…
CVE-2025-7160CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to i…
CVE-2025-7157CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It i…
CVE-2025-7155CRITICALCVSS 9.8EG 9.8
2025-07-08
A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid lea…
CVE-2025-7147CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to…
CVE-2025-7136CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/view_vacancy.php. The manipulation of the argument ID leads to sql injec…
CVE-2025-7135CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_vacancy. The manipulation of the ar…
CVE-2025-7134CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_application. The manipulation of the argument ID lead…
CVE-2025-7132CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_payroll. The manipulation of the argument ID leads …
CVE-2025-7131CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_employee_attendance. The manipulation of t…
CVE-2025-7130CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_payroll. The manipulation of the argument ID leads to sql injecti…
CVE-2025-7129CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_employee_attendance_single. The manipulation of the argument ID…
CVE-2025-7128CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculate_payroll. The manipulation of the argument ID leads to sql …
CVE-2025-7122CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument Username leads to sql injectio…
CVE-2025-7120CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/check_availability.php. The manipulation of the argument email leads…
CVE-2025-7119CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/index.php. The manipulation of the argument Username lead…
CVE-2025-7102CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injecti…
CVE-2025-7101CRITICALCVSS 9.8EG 9.8
2025-07-07
A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass …
CVE-2025-6963CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The atta…
CVE-2025-6962CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects an unknown part of the file /myprofileup.php. The manipulation of the argument ID leads to sql injection. It is possible…
CVE-2025-6961CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /mark.php. The manipulation of the argument ID leads to sql inj…
CVE-2025-6960CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability classified as critical was found in Campcodes Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to sql injectio…
CVE-2025-6959CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0. Affected is an unknown function of the file /eloginwel.php. The manipulation of the argument ID leads to sql injection. It is possible to la…
CVE-2025-6958CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack …
CVE-2025-6957CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /process/eprocess.php. The manipulation of the argument mailuid leads to sql injec…
CVE-2025-6956CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possi…
CVE-2025-6955CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql…
CVE-2025-6954CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql…
CVE-2025-6938CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editcus.php. The manipulation of the argument ID leads to sql injection. Th…
CVE-2025-6937CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /large.php. The manipulation of the argument ID leads to sql injection. The …
CVE-2025-6936CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /addpro.php. The manipulation of the argument ID leads to sql injection. It is possib…
CVE-2025-6935CRITICALCVSS 9.8EG 9.8
2025-07-01
A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/payment_add.php. The manipulation of the argument cid leads to sql in…
CVE-2025-6917CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/registration.php. The manipulation of the argument uname leads to sql injection…
CVE-2025-6907CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The manipulation of the argument fname leads to sql injection. The attack can be in…
CVE-2025-6906CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate th…
CVE-2025-6905CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. Th…
CVE-2025-6904CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument car_name leads to sql i…
CVE-2025-6903CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql…
CVE-2025-6902CRITICALCVSS 9.8EG 9.8
2025-06-30
A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sq…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →