CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,223 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 65 of 105

CVE-2025-5576CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument from…
CVE-2025-5577CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injectio…
CVE-2025-5578CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argume…
CVE-2025-5579CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname le…
CVE-2025-5580CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possibl…
CVE-2025-5581CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument User leads to sql injection.…
CVE-2025-5582CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. …
CVE-2025-5583CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack r…
CVE-2025-5599CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The a…
CVE-2025-5602CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument full_name leads to sql injectio…
CVE-2025-5603CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument full_name/use…
CVE-2025-5604CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql inje…
CVE-2025-5606CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. Th…
CVE-2025-5610HIGHCVSS 8.8EG 8.8
2025-06-04
A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument …
CVE-2025-5611HIGHCVSS 8.8EG 8.8
2025-06-04
A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affects an unknown part of the file /submitpropertyupdate.php. The manipulation of the argument ID leads to sql injection. It…
CVE-2025-5612CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection.…
CVE-2025-5613CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /request-details.php. The manipulation of the argument requestid leads to sql injec…
CVE-2025-5614HIGHCVSS 8.8EG 8.8
2025-06-04
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql i…
CVE-2025-5615HIGHCVSS 8.8EG 8.8
2025-06-04
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /details.php. The manipulation of the argument requestid lea…
CVE-2025-5616HIGHCVSS 8.8EG 8.8
2025-06-04
A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/profile.php. The manipulation of the argument mobilenumber lea…
CVE-2025-5617CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/manage-teams.php. The manipulation of the argument teamid leads to sql injection. It is p…
CVE-2025-5618CRITICALCVSS 9.8EG 9.8
2025-06-04
A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /admin/edit-team.php. The manipulation of the argument teamid leads to sql injection. The …
CVE-2025-5625CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-teacher.php. The manipulation of the argument searchteacher l…
CVE-2025-5626CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/edit-subjects-detail.php. The manipulation of the argument editid leads to s…
CVE-2025-56266CRITICALCVSS 9.8EG 9.8
2025-09-08
A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.
CVE-2025-5627HIGHCVSS 7.5EG 7.5
2025-06-05
A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads …
CVE-2025-5631CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post l…
CVE-2025-5632HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulati…
CVE-2025-5633HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the…
CVE-2025-5638HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads…
CVE-2025-5639CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injectio…
CVE-2025-5650CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be i…
CVE-2025-5652HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/toda…
CVE-2025-5653HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the arg…
CVE-2025-5654HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads …
CVE-2025-5655HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql in…
CVE-2025-5656HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-category.php. The manipulation of the argument description leads to …
CVE-2025-5657HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument uid leads to sql injec…
CVE-2025-5658HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatecomplaint.php. The manipulation of the argument Status leads to sql injection. It…
CVE-2025-5659HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql…
CVE-2025-5660HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argumen…
CVE-2025-5663CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata le…
CVE-2025-5668HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible…
CVE-2025-5669HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection. The at…
CVE-2025-5670HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to…
CVE-2025-5674HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file urinalysis_form.php. The manipulation of the argument urinalysis_i…
CVE-2025-5675CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the argument from…
CVE-2025-5676CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=login. The manipulation of the argument Username …
CVE-2025-5677CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=save_application. The manipulation of the argumen…
CVE-2025-5693HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-result.php. The manipulat…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →