CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,223 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 62 of 105

CVE-2025-4864HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection…
CVE-2025-4865HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql inject…
CVE-2025-4866MEDIUMCVSS 6.3EG 6.3
2025-05-18
A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack …
CVE-2025-4869HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation of the argument menu leads to sql injection. It is …
CVE-2025-4870HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. The …
CVE-2025-4873HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument Usern…
CVE-2025-4874HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql inje…
CVE-2025-4875HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. T…
CVE-2025-4880HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql inj…
CVE-2025-4881HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user_save.php. The manipulation of the argument username/name le…
CVE-2025-4882HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_update.php. The manipulation of the argument team leads to sql injection. …
CVE-2025-4884HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/assign_save.php. The manipulation of the argument team leads to sql in…
CVE-2025-4885HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is…
CVE-2025-4886HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial lead…
CVE-2025-4895HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads…
CVE-2025-4899HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_update.php. The manipulation of the argument ID leads to sql in…
CVE-2025-4900HIGHCVSS 7.3EG 7.3
2025-05-18
A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible …
CVE-2025-4906HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible t…
CVE-2025-4907HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to…
CVE-2025-4908HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads t…
CVE-2025-4910HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads …
CVE-2025-4911HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql inject…
CVE-2025-4913HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument Username leads to…
CVE-2025-4914HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql inj…
CVE-2025-4915HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/auto-taxi-entry-detail.php. The manipulation of the argument price …
CVE-2025-4916HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber le…
CVE-2025-4917HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads …
CVE-2025-4924HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /user_void_transaction.php. The manipulation of the argument order_id leads t…
CVE-2025-4925HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of t…
CVE-2025-4927HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fro…
CVE-2025-4928HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /save_lawyer_edit_profile.php. The manipulation leads to sql injection. T…
CVE-2025-4929HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The att…
CVE-2025-4930HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /my-cart.php. The manipulation of the argument billingaddress leads to sql injection. It is possible…
CVE-2025-4931HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /user_registation.php. The manipulation of the argument email lea…
CVE-2025-4932HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown functionality of the file /lawyer_registation.php. The manipulation of the argum…
CVE-2025-4933MEDIUMCVSS 6.3EG 6.3
2025-05-19
A vulnerability, which was classified as critical, was found in ponaravindb Hospital-Management-System 1.0. This affects an unknown part of the file /doctor-panel.php. The manipulation of the argument ID leads to sql injection. It is possi…
CVE-2025-4934HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Conta…
CVE-2025-4935HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/changePassword.php. The manipulation of the argument user_id leads to sq…
CVE-2025-4936HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin-page.php. The manipulation of the argument 1_price leads to sql injection. I…
CVE-2025-4937HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mo…
CVE-2025-4938MEDIUMCVSS 6.3EG 6.3
2025-05-19
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registererms.php. The manipulation of the argument Email leads …
CVE-2025-4940HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admin_info.php. The manipulation of the argument batch lea…
CVE-2025-4941HIGHCVSS 7.3EG 7.3
2025-05-19
A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql …
CVE-2025-4999MEDIUMCVSS 6.3EG 6.3
2025-05-20
A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected by this issue is the function sub_4153FC of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler. T…
CVE-2025-5000CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000. It has been classified as critical. This affects the function control_panel_sw of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler.…
CVE-2025-5002CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_proposal_update_order.php. The manipulation of the argument order_id leads…
CVE-2025-5003CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /semester_ajax.php. The manipulation of the argument ID leads to sql injection.…
CVE-2025-5004CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add_course.php. The manipulation of the argument c/subname leads to sql in…
CVE-2025-5006CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/category.php. The manipulation of the argument Category leads to sql injection. It is…
CVE-2025-5008CRITICALCVSS 9.8EG 9.8
2025-05-20
A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_teacher.php. The manipulation of the argument e leads to…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →