CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 17)
Page 17 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13075 | Medium | 4.7 | 2025-11-12 | A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing mani… |
CVE-2025-13060 | High | 7.3 | 2025-11-12 | A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such… |
CVE-2025-13059 | Medium | 6.3 | 2025-11-12 | A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This… |
CVE-2025-64099 | | 2025-11-12 | Open Access Management (OpenAM) is an access management solution. In versions prior to 16.0.0, if the "claims_parameter_supported" parameter is activated, it i… | |
CVE-2025-13057 | Medium | 6.3 | 2025-11-12 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_studen… |
CVE-2025-47286 | High | 7.2 | 2025-11-10 | Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop i… |
CVE-2025-12939 | Medium | 6.3 | 2025-11-10 | A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-12938 | High | 7.3 | 2025-11-10 | A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_lo… |
CVE-2025-12933 | Medium | 6.3 | 2025-11-10 | A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcom… |
CVE-2025-12932 | Medium | 4.7 | 2025-11-10 | A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. Th… |
CVE-2025-12931 | Medium | 6.3 | 2025-11-10 | A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orde… |
CVE-2025-12930 | Medium | 6.3 | 2025-11-10 | A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of th… |
CVE-2025-12929 | High | 7.3 | 2025-11-10 | A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Exec… |
CVE-2025-12928 | High | 7.3 | 2025-11-10 | A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of… |
CVE-2025-12927 | Medium | 4.7 | 2025-11-10 | A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipu… |
CVE-2025-12926 | Medium | 6.3 | 2025-11-10 | A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipula… |
CVE-2025-12921 | Medium | 4.3 | 2025-11-10 | A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFD… |
CVE-2025-12916 | Medium | 6.3 | 2025-11-09 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_lo… |
CVE-2025-12914 | Medium | 4.7 | 2025-11-08 | A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the com… |
CVE-2025-12913 | Medium | 4.7 | 2025-11-08 | A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the ar… |
CVE-2025-12873 | Medium | 4.7 | 2025-11-07 | A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipu… |
CVE-2025-12861 | Medium | 4.7 | 2025-11-07 | A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipul… |
CVE-2025-12860 | Medium | 4.7 | 2025-11-07 | A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderb… |
CVE-2025-12859 | Medium | 4.7 | 2025-11-07 | A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php. The manipulation of the argum… |
CVE-2025-12857 | Medium | 4.7 | 2025-11-07 | A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook… |
CVE-2025-12856 | Medium | 4.7 | 2025-11-07 | A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulatio… |
CVE-2025-12855 | Medium | 4.7 | 2025-11-07 | A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admin/newsletterdel.php… |
CVE-2025-12853 | Medium | 4.7 | 2025-11-07 | A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php… |
CVE-2025-55343 | Critical | 9.9 | 2025-11-05 | Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txt_depe_codi, busqueda/busqueda.php txt_usu… |
CVE-2025-12617 | High | 7.3 | 2025-11-03 | A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of t… |
CVE-2025-12614 | Medium | 4.7 | 2025-11-03 | A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php… |
CVE-2025-12612 | Medium | 6.3 | 2025-11-03 | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?ac… |
CVE-2025-12610 | Medium | 4.7 | 2025-11-03 | A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a ma… |
CVE-2025-12609 | Medium | 4.7 | 2025-11-03 | A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php… |
CVE-2025-12608 | High | 7.3 | 2025-11-03 | A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php… |
CVE-2025-12607 | High | 7.3 | 2025-11-03 | A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipul… |
CVE-2025-12606 | High | 7.3 | 2025-11-03 | A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown processing of the file /manage_borrower.php… |
CVE-2025-12605 | High | 7.3 | 2025-11-02 | A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manage_loan.php. The manipula… |
CVE-2025-12604 | High | 7.3 | 2025-11-02 | A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /load_fields.php. The manipulation o… |
CVE-2025-12598 | Medium | 4.7 | 2025-11-02 | A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.ph… |
CVE-2025-12597 | Medium | 4.7 | 2025-11-02 | A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the fil… |
CVE-2025-12594 | Medium | 4.7 | 2025-11-02 | A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown function of the file /admin/add_accoun… |
CVE-2025-12342 | High | 7.3 | 2025-10-28 | A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login… |
CVE-2025-12339 | High | 7.3 | 2025-10-28 | A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file /admin/… |
CVE-2025-12338 | High | 7.3 | 2025-10-28 | A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file /admin/admin_product.p… |
CVE-2025-12337 | High | 7.3 | 2025-10-28 | A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/admin_feature.php. Pe… |
CVE-2025-12336 | High | 7.3 | 2025-10-28 | A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/ad… |
CVE-2025-12329 | Medium | 6.3 | 2025-10-27 | A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function of the fil… |
CVE-2025-12328 | Medium | 6.3 | 2025-10-27 | A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem… |
CVE-2025-12327 | Medium | 6.3 | 2025-10-27 | A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /des… |
CVE-2025-12326 | High | 7.3 | 2025-10-27 | A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /process.php… |
CVE-2025-12325 | High | 7.3 | 2025-10-27 | A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The man… |
CVE-2025-12316 | High | 7.3 | 2025-10-27 | A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The mani… |
CVE-2025-12315 | Medium | 4.7 | 2025-10-27 | A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulatio… |
CVE-2025-12314 | Medium | 4.7 | 2025-10-27 | A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing… |
CVE-2025-12313 | Medium | 6.3 | 2025-10-27 | A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipu… |
CVE-2025-12309 | High | 7.3 | 2025-10-27 | A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipul… |
CVE-2025-12308 | High | 7.3 | 2025-10-27 | A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletem… |
CVE-2025-12307 | High | 7.3 | 2025-10-27 | A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfri… |
CVE-2025-12306 | High | 7.3 | 2025-10-27 | A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulati… |
CVE-2025-12294 | Medium | 4.7 | 2025-10-27 | A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipula… |
CVE-2025-12293 | High | 7.3 | 2025-10-27 | A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of… |
CVE-2025-12292 | High | 7.3 | 2025-10-27 | A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the a… |
CVE-2025-12287 | Medium | 4.7 | 2025-10-27 | A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown functi… |
CVE-2025-12277 | High | 7.3 | 2025-10-27 | A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentL… |
CVE-2025-12266 | Medium | 6.3 | 2025-10-27 | A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009. This vulnerability affects the function _empty o… |
CVE-2025-12263 | Medium | 6.3 | 2025-10-27 | A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation… |
CVE-2025-12262 | Medium | 6.3 | 2025-10-27 | A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing man… |
CVE-2025-12261 | Medium | 6.3 | 2025-10-27 | A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performi… |
CVE-2025-12257 | High | 7.3 | 2025-10-27 | A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /view_res… |
CVE-2025-12256 | Medium | 6.3 | 2025-10-27 | A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Exec… |
CVE-2025-12255 | Medium | 6.3 | 2025-10-27 | A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing… |
CVE-2025-12254 | Medium | 6.3 | 2025-10-27 | A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.ph… |
CVE-2025-12253 | High | 7.3 | 2025-10-27 | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/porta… |
CVE-2025-12252 | Medium | 6.3 | 2025-10-27 | A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of t… |
CVE-2025-12249 | Medium | 6.3 | 2025-10-27 | A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Per… |
CVE-2025-12248 | High | 7.3 | 2025-10-27 | A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the a… |
CVE-2025-12243 | Medium | 6.3 | 2025-10-27 | A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.ph… |
CVE-2025-12242 | Medium | 6.3 | 2025-10-27 | A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/ch… |
CVE-2025-12238 | Medium | 6.3 | 2025-10-27 | A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Perf… |
CVE-2025-12237 | High | 7.3 | 2025-10-27 | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulati… |
CVE-2025-12226 | Medium | 4.7 | 2025-10-27 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_class.php. Performi… |
CVE-2025-12215 | High | 7.3 | 2025-10-27 | A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of t… |
CVE-2025-12208 | High | 7.3 | 2025-10-27 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing… |
CVE-2025-62697 | | 2025-10-20 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in The Wikimedia Foundation Mediawiki - Langua… | |
CVE-2025-11944 | Medium | 4.7 | 2025-10-19 | A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component R… |
CVE-2025-11912 | Medium | 6.3 | 2025-10-17 | A flaw has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected is the function Query of the file /DeviceState.do?Action=Query. This mani… |
CVE-2025-11911 | Medium | 6.3 | 2025-10-17 | A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This impacts the function Query of the file /DeviceFault.do?Action=Query. T… |
CVE-2025-11910 | Medium | 6.3 | 2025-10-17 | A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This affects the function Query of the file /MemoryState.do?A… |
CVE-2025-11909 | Medium | 6.3 | 2025-10-17 | A weakness has been identified in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The impacted element is the function queryLast of the file /RepairRecord… |
CVE-2025-11905 | Medium | 6.3 | 2025-10-17 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2. This vulnerability affects the function getArticle of the file app\modules\cms\controller\gather… |
CVE-2025-11904 | Medium | 6.3 | 2025-10-17 | A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the arg… |
CVE-2025-11903 | Medium | 6.3 | 2025-10-17 | A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulat… |
CVE-2025-11902 | Medium | 6.3 | 2025-10-17 | A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findField of the file /cms/article/findField… |
CVE-2025-11736 | High | 7.3 | 2025-10-14 | A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipula… |
CVE-2025-11668 | Medium | 4.7 | 2025-10-13 | A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/update_use… |
CVE-2025-11667 | Medium | 6.3 | 2025-10-13 | A vulnerability was found in code-projects Automated Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_candi… |
CVE-2025-11664 | Medium | 4.7 | 2025-10-13 | A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /ad… |
CVE-2025-11663 | Medium | 4.7 | 2025-10-13 | A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/manage-s… |
CVE-2025-11662 | High | 7.3 | 2025-10-13 | A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulat… |