CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,096 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 62 of 102

CVE-2025-5208CRITICALCVSS 9.8EG 7.3
2025-05-26
A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/check_availability.php. The manipulation of the argument emailid leads to…
CVE-2025-5210CRITICALCVSS 9.8EG 7.3
2025-05-26
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /loginerms.php. The manipulation of the argument Email leads to sql injectio…
CVE-2025-5211CRITICALCVSS 9.8EG 7.3
2025-05-26
A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue affects some unknown processing of the file /myprofile.php. The manipulation of the argument EmpCode leads to sql injectio…
CVE-2025-5212CRITICALCVSS 9.8EG 7.3
2025-05-26
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affected is an unknown function of the file /admin/editempexp.php. The manipulation of the argument emp1name leads to sql in…
CVE-2025-5213CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_file.php. The manipulation of the argument …
CVE-2025-5214CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/course_detail_user_new.php. The manipulation of the arg…
CVE-2025-5216CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initia…
CVE-2025-5224CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql…
CVE-2025-5225CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument voter leads to sql injection. It is possible…
CVE-2025-5226HIGHCVSS 7.3EG 7.3
2025-05-27
A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The att…
CVE-2025-5227HIGHCVSS 7.3EG 7.3
2025-05-27
A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack…
CVE-2025-5229CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/view-patient.php. The manipulation of the argument viewid …
CVE-2025-5230CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate/todate leads to sql i…
CVE-2025-5231CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability classified as critical was found in PHPGurukul Company Visitor Management System 1.0. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. …
CVE-2025-5232HIGHCVSS 7.2EG 4.7
2025-05-27
A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate…
CVE-2025-5246CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /hms/admin/query-details.php. The manipulation of the argument adminremark leads to sq…
CVE-2025-5248CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affected is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate le…
CVE-2025-5249CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-category.php. The manipulation of the argument Category lead…
CVE-2025-5250CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql i…
CVE-2025-5251CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument Category leads to sql injection. It…
CVE-2025-5252CRITICALCVSS 9.8EG 7.3
2025-05-27
A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injectio…
CVE-2025-5298CRITICALCVSS 9.8EG 7.3
2025-05-28
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/…
CVE-2025-53097MEDIUMCVSS 5.9EG 5.9
2025-06-27
Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's `search_files` tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an…
CVE-2025-5332CRITICALCVSS 9.8EG 7.3
2025-05-29
A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument email leads to sql injection. The attack may…
CVE-2025-5358CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php. The manipulation of the argum…
CVE-2025-5359CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is …
CVE-2025-5360CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection.…
CVE-2025-5361CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to s…
CVE-2025-5362CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilizat…
CVE-2025-5363CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /doctor/index.php. The manipulation of the argument Userna…
CVE-2025-5364CRITICALCVSS 9.8EG 7.3
2025-05-30
A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /doctor/add-patient.php. The manipulation of the argument patname lea…
CVE-2025-5365CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/patient-search.php. The manipulation of the argument searchdata leads to sql …
CVE-2025-5367CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument Product leads to sql injectio…
CVE-2025-5368HIGHCVSS 8.8EG 6.3
2025-05-31
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate…
CVE-2025-5369CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is p…
CVE-2025-5370CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injec…
CVE-2025-5371CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin.php. The manipulation of …
CVE-2025-5373HIGHCVSS 8.8EG 6.3
2025-05-31
A vulnerability has been found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/users-applications.php. The manipulation of the argument userid leads t…
CVE-2025-5374HIGHCVSS 8.8EG 6.3
2025-05-31
A vulnerability was found in PHPGurukul Online Birth Certificate System 2.0 and classified as critical. This issue affects some unknown processing of the file /admin/all-applications.php. The manipulation of the argument del leads to sql i…
CVE-2025-5375HIGHCVSS 8.8EG 6.3
2025-05-31
A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/registered-users.php. The manipulation of the argument del leads …
CVE-2025-5376CRITICALCVSS 9.8EG 7.3
2025-05-31
A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient.php. The manipulation of the …
CVE-2025-5384CRITICALCVSS 9.8EG 6.3
2025-05-31
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible t…
CVE-2025-5386CRITICALCVSS 9.8EG 6.3
2025-05-31
A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be in…
CVE-2025-5388CRITICALCVSS 9.8EG 6.3
2025-05-31
A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be …
CVE-2025-5400CRITICALCVSS 9.8EG 7.3
2025-06-01
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classified as critical. Affected is an unknown function of the file /user.php of the component GET Parameter Handler. The manip…
CVE-2025-5401CRITICALCVSS 9.8EG 7.3
2025-06-01
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Par…
CVE-2025-5402CRITICALCVSS 9.8EG 7.3
2025-06-01
A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/includes/edit_post.php of the compon…
CVE-2025-5403HIGHCVSS 8.8EG 6.3
2025-06-01
A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/view_all_posts.php of the component GET Parameter Handler. The …
CVE-2025-5430CRITICALCVSS 9.8EG 6.3
2025-06-02
A vulnerability, which was classified as critical, has been found in AssamLook CMS 1.0. This issue affects some unknown processing of the file /product.php. The manipulation of the argument ID leads to sql injection. The attack may be init…
CVE-2025-5431HIGHCVSS 8.8EG 6.3
2025-06-02
A vulnerability, which was classified as critical, was found in AssamLook CMS 1.0. Affected is an unknown function of the file /department-profile.php. The manipulation of the argument ID leads to sql injection. It is possible to launch th…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →