CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog
5,223 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-74page 72 of 105
- CVE-2025-7131CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_employee_attendance. The manipulation of t…
- CVE-2025-7132CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_payroll. The manipulation of the argument ID leads …
- CVE-2025-7134CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_application. The manipulation of the argument ID lead…
- CVE-2025-7135CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_vacancy. The manipulation of the ar…
- CVE-2025-7136CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/view_vacancy.php. The manipulation of the argument ID leads to sql injec…
- CVE-2025-7137HIGHCVSS 8.8EG 8.82025-07-07
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staff_id leads to sql in…
- CVE-2025-7138HIGHCVSS 8.8EG 8.82025-07-07
A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads …
- CVE-2025-7147CRITICALCVSS 9.8EG 9.82025-07-07
A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to…
- CVE-2025-7149HIGHCVSS 8.8EG 8.82025-07-07
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/candidates_delete.php. The manipulation of the argument ID leads to sql injection…
- CVE-2025-7150HIGHCVSS 8.8EG 8.82025-07-07
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/voters_delete.php. The manipulation of the argument ID leads to sql inje…
- CVE-2025-7155CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid lea…
- CVE-2025-7156MEDIUMCVSS 6.3EG 6.32025-07-08
A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The att…
- CVE-2025-7157CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It i…
- CVE-2025-7158HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-normal-ticket.php. The manipulation of the argument I…
- CVE-2025-7159HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage-animals.php. The manipulation of the argument ID leads to sql …
- CVE-2025-7160CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to i…
- CVE-2025-7161HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal-ticket.php. The manipulation of the argument cprice leads to sql injection. The…
- CVE-2025-7162HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/add-foreigners-ticket.php. The manipulation of the argument cprice lea…
- CVE-2025-7163HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-animals.php. The manipulation of the argument cnum leads to sql injection. It is p…
- CVE-2025-7164CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Usernam…
- CVE-2025-7165CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email le…
- CVE-2025-7166HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to in…
- CVE-2025-7167HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument ID leads to sql injection. The attac…
- CVE-2025-7168CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /userlogin.php. The manipulation of the argument email leads to sql injection. The…
- CVE-2025-7169CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical has been found in code-projects Crime Reporting System 1.0. Affected is an unknown function of the file /complainer_page.php. The manipulation of the argument location leads to sql injection. It is po…
- CVE-2025-7170CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical was found in code-projects Crime Reporting System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql inje…
- CVE-2025-7171CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functionality of the file /policelogin.php. The manipulation of the argument email leads …
- CVE-2025-7172CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, was found in code-projects Crime Reporting System 1.0. This affects an unknown part of the file /headlogin.php. The manipulation of the argument email leads to sql injection. It is possibl…
- CVE-2025-7173CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-student.php. The manipulation of the argument Username leads to sql injection. The atta…
- CVE-2025-7174CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file /teacher-issue-book.php. The manipulation of the argument idn leads to sql injection. The atta…
- CVE-2025-7176CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view-medhistory.php. The manipulation of the argument viewid l…
- CVE-2025-7177HIGHCVSS 7.2EG 7.22025-07-08
A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/editcar-washpoint.php. The manipulation of the argument wpid …
- CVE-2025-7178CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible t…
- CVE-2025-7179CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be…
- CVE-2025-7180CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument User leads to sql injection. The…
- CVE-2025-7183CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/customer_account.php. The manipulation of the argument Customer leads…
- CVE-2025-7184CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books.php. The manipulation of the argument Search leads to sql injection. It is poss…
- CVE-2025-7185CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /approve.php. The manipulation of the argument ID leads to sql injection. The attack can b…
- CVE-2025-7186HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetch_chat.php. The manipulation of the argument ID leads to sql injection. The attack …
- CVE-2025-7187HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetch_member.php. The manipulation of the argument ID leads to sql injection. It is possible to launc…
- CVE-2025-7188HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The …
- CVE-2025-7189HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/send_message.php. The manipulation of the argument msg leads to sql …
- CVE-2025-7191CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability has been found in code-projects Student Enrollment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument Username leads to sql injection. The…
- CVE-2025-7192HIGHCVSS 8.8EG 8.82025-07-08
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack…
- CVE-2025-7193CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument suppli…
- CVE-2025-7196CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The …
- CVE-2025-7197CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The manipulation of the argument ID leads to sql injection. It is possible to initiat…
- CVE-2025-7198CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can b…
- CVE-2025-7199CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, has been found in code-projects Library System 1.0. This issue affects some unknown processing of the file /notapprove.php. The manipulation of the argument ID leads to sql injection. The …
- CVE-2025-7200CRITICALCVSS 9.8EG 9.82025-07-08
A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantity_upd.php. The manipulation of the ar…
Map vulnerabilities like CWE-74 to your infrastructure
EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →