CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 20)
Page 20 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13420 | High | 7.3 | 2025-11-19 | A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventSto… |
CVE-2025-13410 | High | 7.3 | 2025-11-19 | A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manip… |
CVE-2025-13396 | Medium | 6.3 | 2025-11-19 | A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation… |
CVE-2025-13395 | High | 7.3 | 2025-11-19 | A security flaw has been discovered in codehub666 94list up to 5831c8240e99a72b7d3508c79ef46ae4b96befe8. The impacted element is the function Login of the file… |
CVE-2025-13347 | Medium | 6.3 | 2025-11-18 | A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_user. Exe… |
CVE-2025-13346 | Medium | 6.3 | 2025-11-18 | A vulnerability was detected in SourceCodester Train Station Ticketing System 1.0. This affects an unknown part of the file /ajax.php?action=save_station. Perf… |
CVE-2025-13345 | Medium | 6.3 | 2025-11-18 | A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the fi… |
CVE-2025-13344 | High | 7.3 | 2025-11-18 | A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file /aj… |
CVE-2025-13325 | Medium | 6.3 | 2025-11-18 | A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. E… |
CVE-2025-13323 | High | 7.3 | 2025-11-18 | A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing m… |
CVE-2025-13306 | Medium | 6.3 | 2025-11-18 | A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formD… |
CVE-2025-13303 | Medium | 6.3 | 2025-11-17 | A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.ph… |
CVE-2025-13302 | Medium | 4.7 | 2025-11-17 | A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation… |
CVE-2025-13301 | High | 7.3 | 2025-11-17 | A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of th… |
CVE-2025-13300 | High | 7.3 | 2025-11-17 | A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/contr… |
CVE-2025-13299 | High | 7.3 | 2025-11-17 | A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. E… |
CVE-2025-13298 | High | 7.3 | 2025-11-17 | A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/cont… |
CVE-2025-13297 | High | 7.3 | 2025-11-17 | A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of… |
CVE-2025-13291 | High | 7.3 | 2025-11-17 | A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing a m… |
CVE-2025-13290 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.ph… |
CVE-2025-13289 | Medium | 6.3 | 2025-11-17 | A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /Teach… |
CVE-2025-13287 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing man… |
CVE-2025-13286 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_use… |
CVE-2025-13285 | High | 7.3 | 2025-11-17 | A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation… |
CVE-2025-13280 | High | 7.3 | 2025-11-17 | A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Lo… |
CVE-2025-13279 | Medium | 6.3 | 2025-11-17 | A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Perfor… |
CVE-2025-13278 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php… |
CVE-2025-13277 | High | 7.3 | 2025-11-17 | A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipula… |
CVE-2025-13276 | High | 7.3 | 2025-11-17 | A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the… |
CVE-2025-13274 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.p… |
CVE-2025-13273 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2025-13272 | High | 7.3 | 2025-11-17 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such man… |
CVE-2025-13271 | High | 7.3 | 2025-11-17 | A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. Thi… |
CVE-2025-13270 | Medium | 6.3 | 2025-11-17 | A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. Th… |
CVE-2025-13269 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action… |
CVE-2025-13268 | Medium | 6.3 | 2025-11-17 | A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/d… |
CVE-2025-13267 | Medium | 6.3 | 2025-11-17 | A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Perf… |
CVE-2025-13264 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The m… |
CVE-2025-13263 | Medium | 6.3 | 2025-11-17 | A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categ… |
CVE-2025-13260 | Medium | 6.3 | 2025-11-17 | A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such m… |
CVE-2025-13259 | Medium | 6.3 | 2025-11-17 | A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation… |
CVE-2025-13257 | High | 7.3 | 2025-11-17 | A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user… |
CVE-2025-13256 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a ma… |
CVE-2025-13255 | Medium | 6.3 | 2025-11-17 | A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_searc… |
CVE-2025-13254 | Medium | 6.3 | 2025-11-17 | A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Su… |
CVE-2025-13253 | Medium | 6.3 | 2025-11-17 | A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /add_librarian.php. This manip… |
CVE-2025-13251 | Medium | 6.3 | 2025-11-16 | A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can lead to sql injection. The attack may be… |
CVE-2025-13248 | High | 7.3 | 2025-11-16 | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /ph… |
CVE-2025-13247 | High | 7.3 | 2025-11-16 | A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.p… |
CVE-2025-13243 | Medium | 6.3 | 2025-11-16 | A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation resul… |
CVE-2025-13242 | High | 7.3 | 2025-11-16 | A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manip… |
CVE-2025-13241 | High | 7.3 | 2025-11-16 | A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation o… |
CVE-2025-13240 | High | 7.3 | 2025-11-16 | A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulatio… |
CVE-2025-13237 | High | 7.3 | 2025-11-16 | A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipul… |
CVE-2025-13236 | Medium | 6.3 | 2025-11-16 | A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edi… |
CVE-2025-13235 | High | 7.3 | 2025-11-16 | A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipu… |
CVE-2025-13234 | Medium | 6.3 | 2025-11-16 | A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Perfor… |
CVE-2025-13233 | High | 7.3 | 2025-11-16 | A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-ite… |
CVE-2025-13210 | Medium | 4.7 | 2025-11-15 | A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index… |
CVE-2025-13208 | Medium | 6.3 | 2025-11-15 | A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function o… |
CVE-2025-13203 | High | 7.3 | 2025-11-15 | A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing man… |
CVE-2025-13201 | High | 7.3 | 2025-11-15 | A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. S… |
CVE-2025-13180 | Low | 3.5 | 2025-11-14 | A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an unknown function of t… |
CVE-2025-13178 | Low | 3.5 | 2025-11-14 | A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /edit_profile of the component User Pro… |
CVE-2025-13172 | Medium | 6.3 | 2025-11-14 | A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performi… |
CVE-2025-13171 | Medium | 6.3 | 2025-11-14 | A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such manipulation of the argument keyword l… |
CVE-2025-13170 | High | 7.3 | 2025-11-14 | A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_ac… |
CVE-2025-13169 | High | 7.3 | 2025-11-14 | A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /ad… |
CVE-2025-13168 | Medium | 6.3 | 2025-11-14 | A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This mani… |
CVE-2025-13123 | Medium | 6.3 | 2025-11-13 | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown function of the file /user/portal/get_firstdate.php. Exe… |
CVE-2025-13122 | High | 7.3 | 2025-11-13 | A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPatientAppointment of… |
CVE-2025-13121 | High | 7.3 | 2025-11-13 | A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/app/Http/Controllers/Front/StoreControll… |
CVE-2025-64741 | High | 8.1 | 2025-11-13 | Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via… |
CVE-2025-13076 | Medium | 4.7 | 2025-11-12 | A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing man… |
CVE-2025-13075 | Medium | 4.7 | 2025-11-12 | A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing mani… |
CVE-2025-13060 | High | 7.3 | 2025-11-12 | A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such… |
CVE-2025-13059 | Medium | 6.3 | 2025-11-12 | A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This… |
CVE-2025-64099 | | 2025-11-12 | Open Access Management (OpenAM) is an access management solution. In versions prior to 16.0.0, if the "claims_parameter_supported" parameter is activated, it i… | |
CVE-2025-13057 | Medium | 6.3 | 2025-11-12 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_studen… |
CVE-2025-47286 | High | 7.2 | 2025-11-10 | Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop i… |
CVE-2025-12939 | Medium | 6.3 | 2025-11-10 | A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-12938 | High | 7.3 | 2025-11-10 | A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_lo… |
CVE-2025-12933 | Medium | 6.3 | 2025-11-10 | A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcom… |
CVE-2025-12932 | Medium | 4.7 | 2025-11-10 | A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. Th… |
CVE-2025-12931 | Medium | 6.3 | 2025-11-10 | A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orde… |
CVE-2025-12930 | Medium | 6.3 | 2025-11-10 | A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of th… |
CVE-2025-12929 | High | 7.3 | 2025-11-10 | A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Exec… |
CVE-2025-12928 | High | 7.3 | 2025-11-10 | A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of… |
CVE-2025-12927 | Medium | 4.7 | 2025-11-10 | A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipu… |
CVE-2025-12926 | Medium | 6.3 | 2025-11-10 | A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipula… |
CVE-2025-12921 | Medium | 4.3 | 2025-11-10 | A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFD… |
CVE-2025-12916 | Medium | 6.3 | 2025-11-09 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_lo… |
CVE-2025-12914 | Medium | 4.7 | 2025-11-08 | A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the com… |
CVE-2025-12913 | Medium | 4.7 | 2025-11-08 | A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the ar… |
CVE-2025-12873 | Medium | 4.7 | 2025-11-07 | A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipu… |
CVE-2025-12861 | Medium | 4.7 | 2025-11-07 | A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipul… |
CVE-2025-12860 | Medium | 4.7 | 2025-11-07 | A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderb… |
CVE-2025-12859 | Medium | 4.7 | 2025-11-07 | A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php. The manipulation of the argum… |
CVE-2025-12857 | Medium | 4.7 | 2025-11-07 | A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook… |
CVE-2025-12856 | Medium | 4.7 | 2025-11-07 | A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulatio… |