CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,796 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 24 of 116

CVE-2025-6307CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /function/edit_customer.php. The manipulation of the argument firstname leads to sql in…
CVE-2025-6306CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin_index.php. The manipulation of the argument Username leads to sql injectio…
CVE-2025-6305CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_feature.php. The manipulation of the argument product_code leads to sql injection. …
CVE-2025-6304CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty[] leads to sql injection. The att…
CVE-2025-6303CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus1.php. The manipulation of the argument Message leads to sql…
CVE-2025-6300CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. This vulnerability affects unknown code of the file /admin/editempeducation.php. The manipulation of the argument yopgra leads to sql inj…
CVE-2025-6296CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /empty_rooms.php. The manipulation of the argument search_box leads to…
CVE-2025-6295CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocated_rooms.php. The manipulation of the argument search…
CVE-2025-6294CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostel_name leads to sql injection. It …
CVE-2025-6293CRITICALCVSS 9.8EG 9.8
2025-06-20
A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contact_manager.php. The manipulation of the argument student_roll_no leads to sql …
CVE-2025-6277CRITICALCVSS 9.8EG 9.8
2025-06-19
A vulnerability classified as critical has been found in Brilliance Golden Link Secondary System up to 20250609. This affects an unknown part of the file /storagework/custTakeInfoPage.htm. The manipulation of the argument custTradeName lea…
CVE-2025-6276CRITICALCVSS 9.8EG 9.8
2025-06-19
A vulnerability was found in Brilliance Golden Link Secondary System up to 20250609. It has been rated as critical. Affected by this issue is some unknown functionality of the file /storagework/rentTakeInfoPage.htm. The manipulation of the…
CVE-2025-6267CRITICALCVSS 9.8EG 9.8
2025-06-19
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /adpweb/a/base/b…
CVE-2025-6160CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_customer_create_order.php. The manipulation of the argu…
CVE-2025-6159CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocate_room.php. The manipulation of the argument search_box leads to sql injection. The…
CVE-2025-6157CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of the argume…
CVE-2025-6155CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql inject…
CVE-2025-6154CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument student_roll_no leads to sql …
CVE-2025-6153CRITICALCVSS 9.8EG 9.8
2025-06-17
A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument search_box leads to sql injecti…
CVE-2025-6136CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument recipt_no leads to …
CVE-2025-6135CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument client_id/nominee_i…
CVE-2025-6134CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument client_id leads to sql inject…
CVE-2025-6133CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agent_id leads …
CVE-2025-6132CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability has been found in Chanjet CRM 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysconfig/departmentsetting.php. The manipulation of the argument gblOrgID leads to sql i…
CVE-2025-6124CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. This issue affects some unknown processing of the file /tablelow.php. The manipulation of the argument ID leads to sql injection. The attack…
CVE-2025-6123CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. Th…
CVE-2025-6118CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affects some unknown processing of the file /vehicle/search of the component API. The manipulation of the arg…
CVE-2025-6117CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /Reservations/Search of the component API. The manipulation of th…
CVE-2025-6116CRITICALCVSS 9.8EG 9.8
2025-06-16
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the ar…
CVE-2025-6095CRITICALCVSS 9.8EG 9.8
2025-06-15
A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unknown function of the file /checklogin.php. The manipulation of the argument username/password leads to sql injection. I…
CVE-2025-5913CRITICALCVSS 9.8EG 9.8
2025-06-10
A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata…
CVE-2025-5881CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /user/confirm_password.php. The manipulation of the argument cid leads to sql injection. Th…
CVE-2025-5860CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affects an unknown part of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to …
CVE-2025-5856CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injec…
CVE-2025-5778CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is po…
CVE-2025-5759CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument…
CVE-2025-5756CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to …
CVE-2025-5707CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of …
CVE-2025-5706CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /new-user-testing.php. The manipulation o…
CVE-2025-5698CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename lead…
CVE-2025-5697CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation…
CVE-2025-5696CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file /storagework/rentChangeCheckInfoPage.htm. The manipulation of the argument clie…
CVE-2025-5677CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=save_application. The manipulation of the argumen…
CVE-2025-5676CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=login. The manipulation of the argument Username …
CVE-2025-5675CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the argument from…
CVE-2025-5663CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata le…
CVE-2025-5650CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be i…
CVE-2025-5639CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injectio…
CVE-2025-5631CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post l…
CVE-2025-5626CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/edit-subjects-detail.php. The manipulation of the argument editid leads to s…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →