CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.— MITRE CWE catalog

5,223 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 73 of 105

CVE-2025-7211CRITICALCVSS 9.8EG 9.8
2025-07-09
A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cart_add.php. The manipulation of the argument ID leads to sql injection. The attack can…
CVE-2025-7212HIGHCVSS 8.8EG 8.8
2025-07-09
A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertAgent.php. The manipulation of the argument agent_id leads to sql…
CVE-2025-7217CRITICALCVSS 9.8EG 9.8
2025-07-09
A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_position. The manipulation of the argument ID leads to sql inje…
CVE-2025-7218CRITICALCVSS 9.8EG 9.8
2025-07-09
A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_position. The manipulation of the argument ID leads to sql inje…
CVE-2025-7219CRITICALCVSS 9.8EG 9.8
2025-07-09
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_allowances. The manipulation of the argument ID leads to sql inje…
CVE-2025-7220CRITICALCVSS 9.8EG 9.8
2025-07-09
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_deductions. The manipulation of the argume…
CVE-2025-7350HIGHCVSS 8.6EG 8.6
2025-09-09
A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication.
CVE-2025-7409CRITICALCVSS 9.8EG 9.8
2025-07-10
A vulnerability was found in code-projects Mobile Shop 1.0 and classified as critical. This issue affects some unknown processing of the file /LoginAsAdmin.php. The manipulation of the argument email leads to sql injection. The attack may …
CVE-2025-7410CRITICALCVSS 9.8EG 9.8
2025-07-10
A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cart_remove.php. The manipulation of the argument ID leads to sql injection. It is possible to…
CVE-2025-7411CRITICALCVSS 9.8EG 9.8
2025-07-10
A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injecti…
CVE-2025-7415HIGHCVSS 8.8EG 8.8
2025-07-10
A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the function fromTraceroutGet of the file /goform/getTraceroute of the component httpd. The manipulation of the argument des…
CVE-2025-7436CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_vacancy. The manipulation of the argument …
CVE-2025-7454CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected is an unknown function of the file /admin/manage_theater.php. The manipulation of the argument ID leads to sql in…
CVE-2025-7455CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability classified as critical was found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_reserve.php. The manipulation of the argument mi…
CVE-2025-7456CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reserve.php. The manipulation of the argumen…
CVE-2025-7457CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/manage_movie.php. The manipulation of the argument ID leads to sql …
CVE-2025-7459CRITICALCVSS 9.8EG 9.8
2025-07-11
A vulnerability classified as critical was found in code-projects Mobile Shop 1.0. This vulnerability affects unknown code of the file /EditMobile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated…
CVE-2025-7461CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack m…
CVE-2025-7466CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability, which was classified as critical, has been found in 1000projects ABC Courier Management 1.0. Affected by this issue is some unknown functionality of the file /add_dealerrequest.php. The manipulation of the argument Name le…
CVE-2025-7467CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /product-detail.php. The manipulation of the argument ID leads to sql injection. It is possible to initi…
CVE-2025-7469CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/product_add.php. The manipulation of the argument prod_name leads to sql inject…
CVE-2025-7471CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in code-projects Modern Bag 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login-back.php. The manipulation of the argument user-name leads to …
CVE-2025-7474CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in code-projects Job Diary 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The atta…
CVE-2025-7475CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initia…
CVE-2025-7476CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack …
CVE-2025-7478CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. Affected is an unknown function of the file /admin/category-list.php. The manipulation of the argument idCate leads to sql injection. It is possi…
CVE-2025-7479HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/view--detail.php. The manipulation of the argumen…
CVE-2025-7480CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /users/signup.php. The manipulation of the argument email leads to …
CVE-2025-7481HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /users/profile.php. The manipulation of the argument firstname leads to sql inject…
CVE-2025-7482HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been declared as critical. This vulnerability affects unknown code of the file /users/print.php. The manipulation of the argument vid leads to sql injec…
CVE-2025-7483CRITICALCVSS 9.8EG 9.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. This issue affects some unknown processing of the file /users/forgot-password.php. The manipulation of the argument email leads …
CVE-2025-7484HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability classified as critical has been found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/view-outgoingvehicle-detail.php. The manipulation of the argument viewid leads t…
CVE-2025-7489HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchdata leads …
CVE-2025-7490HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. Affected is an unknown function of the file /admin/reg-users.php. The manipulation of the argument del leads to sql injecti…
CVE-2025-7491HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-outgoingvehicle.php. The manipulation of…
CVE-2025-7492HIGHCVSS 8.8EG 8.8
2025-07-12
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage-incomingvehicle.php. The manipulation of the argu…
CVE-2025-7508CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability, which was classified as critical, has been found in code-projects Modern Bag 1.0. Affected by this issue is some unknown functionality of the file /admin/product-update.php. The manipulation of the argument idProduct leads…
CVE-2025-7509CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /admin/slide.php. The manipulation of the argument idSlide leads to sql injection. It is possible to ini…
CVE-2025-7510CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/productadd_back.php. The manipulation of the argument namepro leads to sql injection. The…
CVE-2025-7511MEDIUMCVSS 6.5EG 6.5
2025-07-13
A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/update_account.php. The manipulation of the argument musername leads to sql injection. The …
CVE-2025-7512CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability was found in code-projects Modern Bag 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-back.php. The manipulation of the argument contact-name leads to sql injection. It is possi…
CVE-2025-7513CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability was found in code-projects Modern Bag 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/slideupdate.php. The manipulation of the argument idSlide leads to s…
CVE-2025-7514CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability was found in code-projects Modern Bag 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-list.php. The manipulation of the argument idStatus leads to sql inje…
CVE-2025-7515CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It i…
CVE-2025-7516CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to s…
CVE-2025-7517CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getDay.php. The manipulation of the argument cidval leads to …
CVE-2025-7520HIGHCVSS 8.8EG 8.8
2025-07-13
A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Parking Management System 1.13. This issue affects some unknown processing of the file /admin/manage-category.php. The manipulation of the argument del…
CVE-2025-7521CRITICALCVSS 9.8EG 9.8
2025-07-13
A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injecti…
CVE-2025-7522HIGHCVSS 8.8EG 8.8
2025-07-13
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of …
CVE-2025-7524HIGHCVSS 8.8EG 8.8
2025-07-13
A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of …

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →