CWE-74: Injection
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements in Output Used by a Downstream Component.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- erzhongxmu jeewmserzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection5.3 Medium
- xinhu rainrock rockoaXinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection6.9 Medium
- furion .net frameworkFurion .NET Framework StringRenderExtensions.cs String.Replace sql injection5.3 Medium
- highwarden super store finderhighwarden Super Store Finder index.php sql injection5.3 Medium
- themeum kirki – freeform page builder, website builder & customizerKirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'display_name'5.4 Medium
- themeum kirkiKirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection4.8 Medium
- cisco campus gateway software, meraki mr wireless access points software, meraki mv firmware +1 more +3 moreCisco Meraki Security Hardening Release October 2026 - Improper Neutralization of Special Elements Vulnerabilities8.8 High
- unknown metformMetForm < 4.3.1 - Unauthenticated HTML Injection in Notification Emails via Field Shortcodes5.4 Medium
- openprinting cupsCUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip3.3 Low
- arista networks cloudvision cueSecurity Advisory 01916.9 Medium
- arista networks cloudvision cueSecurity Advisory 01907.1 High
- sourcecodester performance indicator systemSourceCodester Performance Indicator System view_product.php sql injection5.3 Medium
- i18next i18next-http-backendi18next-http-backend incomplete URL validation permits SSRF3.7 Low
- kusalkasilva learning-management-systemKusalkasilva Learning-Management-System search_class.php sql injection5.3 Medium
- kusalkasilva learning-management-systemKusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection6.9 Medium
- kusalkasilva learning-management-systemKusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection6.9 Medium
- kusalkasilva learning-management-systemKusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection6.9 Medium
- campcodes simple student information systemSourceCodester Simple Student Information System searchquery.php sql injection6.9 Medium
- bhagya3929 employee-movement-tracking-and-monitoring-website-for-ioclbhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Booking book.php sql injection5.3 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Registration signup.php sql injection6.9 Medium
- viewsonic vcastCVE-2026-829899.8 Critical
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection6.9 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection6.9 Medium
- feelec-yishu feelcrm-osfeelec-yishu feelcrm-os Member Endpoint MemberController.class.php index sql injection5.3 Medium
- girishsaraf online-appointment-booking-systemgirishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection6.9 Medium
- onetwothreeneth hospitalmanagementsystemonetwothreeneth HospitalManagementSystem print.php get sql injection6.9 Medium
- onetwothreeneth hospitalmanagementsystemonetwothreeneth HospitalManagementSystem transaction_details.php sql injection6.9 Medium
- onetwothreeneth hospitalmanagementsystemUNION HospitalManagementSystem patient_info.php sql injection6.9 Medium
- onetwothreeneth hospitalmanagementsystemonetwothreeneth HospitalManagementSystem controller.php sql injection6.9 Medium
- No product listedTallCMS PluginManager ThemeManager.php code injection5.3 Medium
- feelec-yishu feelcrm-osfeelec-yishu feelcrm-os getMemberByGroups Endpoint AjaxRequestController.class.php sql injection5.3 Medium
- itsourcecode online admission systemitsourcecode Online Admission System schoolyear.php sql injection5.3 Medium
- itsourcecode online admission system projectitsourcecode Online Admission System Project login1.php sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php course sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php update sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system Registration deliverysignup.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system Admin Registration signup.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system deliverymyord.php sql injection6.9 Medium
- kishor-23 food-waste-management-systemkishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection6.9 Medium
- oscommerce oscommerce2osCommerce osCommerce2 Newsletter Management newsletters.php include code injection5.1 Medium
- oscommerce oscommerce2osCommerce osCommerce2 Payment payment.php include code injection4.8 Medium
- itsourcecode online admission systemitsourcecode Online Admission System key.php sql injection5.3 Medium
- itsourcecode online admission systemitsourcecode Online Admission System new.php sql injection5.3 Medium
- itsourcecode online admission systemitsourcecode Online Admission System examinee.php sql injection6.9 Medium
- itsourcecode online admission systemitsourcecode Online Admission System creteria.php sql injection6.9 Medium
- itsourcecode online admission systemitsourcecode Online Admission System confirm.php sql injection6.9 Medium
- sourcecodester online reviewer management systemSourceCodester Online Reviewer Management System btn_functions.php update sql injection6.9 Medium
- itsourcecode online admission systemitsourcecode Online Admission System register1.php sql injection5.3 Medium
- Show moreLoading…