CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,223 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 66 of 105

CVE-2025-5694HIGHCVSS 8.8EG 8.8
2025-06-05
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the…
CVE-2025-5695MEDIUMCVSS 4.7EG 4.7
2025-06-05
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such m…
CVE-2025-5696CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file /storagework/rentChangeCheckInfoPage.htm. The manipulation of the argument clie…
CVE-2025-5697CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation…
CVE-2025-5698CRITICALCVSS 9.8EG 9.8
2025-06-05
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename lead…
CVE-2025-5704HIGHCVSS 7.3EG 7.3
2025-06-05
A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/User.php. The manipulation of the argument txtUserName leads to…
CVE-2025-5705HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sq…
CVE-2025-5706CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /new-user-testing.php. The manipulation o…
CVE-2025-5707CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of …
CVE-2025-5708HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql inject…
CVE-2025-5709HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unknown code of the file /Admin/InsertCategory.php. The manipulation of the argument txtCategoryName l…
CVE-2025-5710HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/InsertState.php. The manipulation of the argument …
CVE-2025-5711HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/InsertCity.php. The manipulation of the argument cmbState leads to…
CVE-2025-5712HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulation of the argument…
CVE-2025-5716HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is …
CVE-2025-5729HIGHCVSS 7.5EG 7.5
2025-06-06
A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management System 1.0. Affected is an unknown function of the file /birthing_record.php. The manipulation of the argument itr_no lea…
CVE-2025-5755HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql in…
CVE-2025-5756CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to …
CVE-2025-5758HIGHCVSS 7.3EG 7.3
2025-06-06
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It …
CVE-2025-5759CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument…
CVE-2025-5761HIGHCVSS 8.8EG 8.8
2025-06-06
A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file /edit-family-member.php. The manipulation of the argument memberage…
CVE-2025-5762HIGHCVSS 7.5EG 7.5
2025-06-06
A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file view_hematology.php. The manipulation of the argument itr_no leads to sql injec…
CVE-2025-5763HIGHCVSS 8.8EG 8.8
2025-06-06
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function sub_F3C8C of the file apollo. The manipulation leads to command injection. The attack can be launche…
CVE-2025-5778CRITICALCVSS 9.8EG 9.8
2025-06-06
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is po…
CVE-2025-5779HIGHCVSS 7.5EG 7.5
2025-06-06
A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itr_no/…
CVE-2025-5780HIGHCVSS 7.5EG 7.5
2025-06-06
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_dental.php. The manipulation of the argument itr_no leads to…
CVE-2025-5782MEDIUMCVSS 6.3EG 6.3
2025-06-06
A vulnerability, which was classified as critical, has been found in PHPGurukul Employee Record Management System 1.3. Affected by this issue is some unknown functionality of the file /resetpassword.php. The manipulation of the argument ne…
CVE-2025-5783MEDIUMCVSS 6.3EG 6.3
2025-06-06
A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. This affects an unknown part of the file /editmyexp.php. The manipulation of the argument emp3workduration leads to sql injec…
CVE-2025-5784HIGHCVSS 8.8EG 8.8
2025-06-06
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /myexp.php. The manipulation of the argument emp3ctc leads to sql injection.…
CVE-2025-58046CRITICALCVSS 9.8EG 9.8
2025-09-15
Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to remote code execution due to insufficient filtering in the getJdbc method of the io.datae…
CVE-2025-5836MEDIUMCVSS 6.3EG 6.3
2025-06-07
A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formSetIptv of the file /goform/SetIPTVCfg of the component POST Request Handler. The manipulation of the argument list lead…
CVE-2025-5837HIGHCVSS 8.8EG 8.8
2025-06-07
A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file /admin/allemployees.php. The manipulation of the argument delid leads to sql injection. …
CVE-2025-5838HIGHCVSS 8.8EG 8.8
2025-06-07
A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. Affected by this vulnerability is an unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminNam…
CVE-2025-5856CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /registration.php. The manipulation of the argument emailid leads to sql injec…
CVE-2025-5857HIGHCVSS 8.8EG 8.8
2025-06-09
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /urinalysis_record.php. The manipulation of the argument itr_no leads to sql…
CVE-2025-5858HIGHCVSS 8.8EG 8.8
2025-06-09
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sq…
CVE-2025-5859HIGHCVSS 8.8EG 8.8
2025-06-09
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument…
CVE-2025-5860CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affects an unknown part of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to …
CVE-2025-5881CRITICALCVSS 9.8EG 9.8
2025-06-09
A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unknown processing of the file /user/confirm_password.php. The manipulation of the argument cid leads to sql injection. Th…
CVE-2025-5913CRITICALCVSS 9.8EG 9.8
2025-06-10
A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata…
CVE-2025-5971MEDIUMCVSS 6.3EG 6.3
2025-06-10
A vulnerability was found in code-projects School Fees Payment System 1.0. It has been classified as critical. This affects an unknown part of the file /ajx.php. The manipulation of the argument name_startsWith leads to sql injection. It i…
CVE-2025-5977HIGHCVSS 7.3EG 7.3
2025-06-10
A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /datatable.php. The manipulation of the argument sSortDir_0 leads to sql injection…
CVE-2025-5979HIGHCVSS 7.3EG 7.3
2025-06-10
A vulnerability classified as critical has been found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /branch.php. The manipulation of the argument ID leads to sql injection. It is possible to init…
CVE-2025-5980HIGHCVSS 7.3EG 7.3
2025-06-10
A vulnerability classified as critical was found in code-projects Restaurant Order System 1.0. This vulnerability affects unknown code of the file /order.php. The manipulation of the argument tabidNoti leads to sql injection. The attack ca…
CVE-2025-6005HIGHCVSS 7.2EG 7.2
2025-06-12
A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code of the file /admin/aboutPost.php. The manipulation of the argument title/aboutimg/info1/info2/info3/btn1/btn2/infox1/inf…
CVE-2025-6006HIGHCVSS 7.2EG 7.2
2025-06-12
A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0. This issue affects some unknown processing of the file /admin/ImgUpdaPost.php. The manipulation of the argument id/imgText/imgDatd/imgUrl leads…
CVE-2025-6007HIGHCVSS 7.2EG 7.2
2025-06-12
A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0. Affected is an unknown function of the file /admin/CopyadminPost.php. The manipulation of the argument icp/Copyright leads to sql injection. It is p…
CVE-2025-6008HIGHCVSS 7.2EG 7.2
2025-06-12
A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ImgAddPost.php. The manipulation of the argument imgDatd/imgText/imgUrl l…
CVE-2025-6009HIGHCVSS 7.2EG 7.2
2025-06-12
A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ipAddPost.php. The manipulation of the argument bz/ipdz leads to sql injection. The …
CVE-2025-6094HIGHCVSS 8.8EG 8.8
2025-06-15
A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the function batchCope of the file app/admin/controller/Download.php. The manipulation of the argument ids leads to sql inj…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →