CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 24)
Page 24 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-10788 | High | 7.3 | 2025-09-22 | A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominvento… |
CVE-2025-10786 | High | 7.3 | 2025-09-22 | A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_user. Th… |
CVE-2025-10785 | High | 7.3 | 2025-09-22 | A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manage_user.php. The manipulation o… |
CVE-2025-10784 | High | 7.3 | 2025-09-22 | A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file… |
CVE-2025-10783 | High | 7.3 | 2025-09-22 | A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10782 | High | 7.3 | 2025-09-22 | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performin… |
CVE-2025-10781 | High | 7.3 | 2025-09-22 | A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such man… |
CVE-2025-10780 | Medium | 6.3 | 2025-09-22 | A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the ar… |
CVE-2025-10762 | Medium | 6.3 | 2025-09-21 | A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of the file app/Http/Controllers/Api/User… |
CVE-2025-10712 | High | 7.3 | 2025-09-19 | A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Pe… |
CVE-2025-10689 | Medium | 6.3 | 2025-09-18 | A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.cgi. Such manipulation of the argument… |
CVE-2025-10688 | High | 7.3 | 2025-09-18 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/operation/pai… |
CVE-2025-10687 | High | 7.3 | 2025-09-18 | A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/add_teacher.php. The manipulation… |
CVE-2025-10673 | High | 7.3 | 2025-09-18 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/module… |
CVE-2025-10670 | High | 7.3 | 2025-09-18 | A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /check_p… |
CVE-2025-10668 | High | 7.3 | 2025-09-18 | A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php… |
CVE-2025-10667 | High | 7.3 | 2025-09-18 | A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_m… |
CVE-2025-10665 | Medium | 6.3 | 2025-09-18 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Pro… |
CVE-2025-10664 | High | 7.3 | 2025-09-18 | A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argu… |
CVE-2025-10663 | High | 7.3 | 2025-09-18 | A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation o… |
CVE-2025-10662 | Medium | 4.7 | 2025-09-18 | A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation… |
CVE-2025-10634 | Medium | 6.3 | 2025-09-18 | A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the co… |
CVE-2025-10629 | Medium | 6.3 | 2025-09-18 | A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Ser… |
CVE-2025-10628 | Medium | 6.3 | 2025-09-18 | A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Mana… |
CVE-2025-10627 | Medium | 6.3 | 2025-09-18 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipul… |
CVE-2025-10626 | Medium | 6.3 | 2025-09-18 | A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php… |
CVE-2025-10625 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/da… |
CVE-2025-10624 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation… |
CVE-2025-10623 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such man… |
CVE-2025-10621 | High | 7.3 | 2025-09-17 | A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This… |
CVE-2025-10620 | Medium | 6.3 | 2025-09-17 | A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulat… |
CVE-2025-10618 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-10617 | Medium | 6.3 | 2025-09-17 | A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/posit… |
CVE-2025-10613 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such ma… |
CVE-2025-10604 | High | 7.3 | 2025-09-17 | A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of… |
CVE-2025-10603 | High | 7.3 | 2025-09-17 | A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_forum/s… |
CVE-2025-10602 | Medium | 6.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/dele… |
CVE-2025-10601 | High | 7.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulati… |
CVE-2025-10599 | High | 7.3 | 2025-09-17 | A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the… |
CVE-2025-10598 | High | 7.3 | 2025-09-17 | A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_pro… |
CVE-2025-10597 | High | 7.3 | 2025-09-17 | A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the f… |
CVE-2025-10596 | High | 7.3 | 2025-09-17 | A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argum… |
CVE-2025-10595 | Medium | 6.3 | 2025-09-17 | A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /a… |
CVE-2025-10594 | Medium | 6.3 | 2025-09-17 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10593 | Medium | 6.3 | 2025-09-17 | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php… |
CVE-2025-10592 | Medium | 6.3 | 2025-09-17 | A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of… |
CVE-2025-10565 | High | 7.3 | 2025-09-16 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /aja… |
CVE-2025-10564 | High | 7.3 | 2025-09-16 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Pe… |
CVE-2025-10563 | High | 7.3 | 2025-09-16 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_category… |
CVE-2025-10562 | High | 7.3 | 2025-09-16 | A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_product. This man… |
CVE-2025-8276 | Medium | 4.3 | 2025-09-16 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization o… |
CVE-2025-10483 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admi… |
CVE-2025-10482 | High | 7.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The man… |
CVE-2025-10481 | Medium | 6.3 | 2025-09-15 | A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /remove_fi… |
CVE-2025-10479 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in SourceCodester Online Student File Management System 1.0. The impacted element is an unknown function of the file /index… |
CVE-2025-10477 | Medium | 6.3 | 2025-09-15 | A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of t… |
CVE-2025-10473 | Medium | 6.3 | 2025-09-15 | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil… |
CVE-2025-58046 | Critical | 9.8 | 2025-09-15 | Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala data source is vulnerable to remote co… |
CVE-2025-10459 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/all-appointment.php. Th… |
CVE-2025-10448 | High | 7.3 | 2025-09-15 | A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This man… |
CVE-2025-10446 | High | 7.3 | 2025-09-15 | A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages… |
CVE-2025-10445 | High | 7.3 | 2025-09-15 | A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/us_transac.php?action=a… |
CVE-2025-10444 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Perfo… |
CVE-2025-10436 | High | 7.3 | 2025-09-15 | A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/sup_searchf… |
CVE-2025-10435 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_e… |
CVE-2025-10431 | Medium | 6.3 | 2025-09-15 | A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such… |
CVE-2025-10430 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.p… |
CVE-2025-10429 | Medium | 6.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /ad… |
CVE-2025-10426 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing m… |
CVE-2025-10421 | Medium | 6.3 | 2025-09-15 | A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipula… |
CVE-2025-10420 | Medium | 6.3 | 2025-09-15 | A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of th… |
CVE-2025-10419 | Medium | 6.3 | 2025-09-15 | A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_… |
CVE-2025-10418 | Medium | 6.3 | 2025-09-15 | A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_stude… |
CVE-2025-10417 | High | 7.3 | 2025-09-15 | A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_pr… |
CVE-2025-10416 | High | 7.3 | 2025-09-15 | A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_suppli… |
CVE-2025-10415 | High | 7.3 | 2025-09-14 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_supplier… |
CVE-2025-10414 | High | 7.3 | 2025-09-14 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_cu… |
CVE-2025-10413 | High | 7.3 | 2025-09-14 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=de… |
CVE-2025-10409 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulati… |
CVE-2025-10408 | Medium | 6.3 | 2025-09-14 | A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.p… |
CVE-2025-10407 | Medium | 6.3 | 2025-09-14 | A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user… |
CVE-2025-10405 | High | 7.3 | 2025-09-14 | A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This ma… |
CVE-2025-10404 | High | 7.3 | 2025-09-14 | A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipu… |
CVE-2025-10403 | High | 7.3 | 2025-09-14 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The ma… |
CVE-2025-10402 | High | 7.3 | 2025-09-14 | A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing… |
CVE-2025-10401 | Medium | 6.3 | 2025-09-14 | A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulatio… |
CVE-2025-10400 | Medium | 6.3 | 2025-09-14 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-m… |
CVE-2025-10399 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the… |
CVE-2025-10396 | High | 7.3 | 2025-09-14 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/… |
CVE-2025-10394 | Medium | 4.7 | 2025-09-14 | A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/co… |
CVE-2025-10387 | Medium | 6.3 | 2025-09-14 | A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipula… |
CVE-2025-10325 | Medium | 6.3 | 2025-09-12 | A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation… |
CVE-2025-10324 | High | 7.3 | 2025-09-12 | A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument p… |
CVE-2025-10323 | High | 7.3 | 2025-09-12 | A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the… |
CVE-2025-10251 | Medium | 6.3 | 2025-09-11 | A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulat… |
CVE-2025-10218 | Medium | 6.3 | 2025-09-10 | A flaw has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/dao/SysRoleDao.go of the component Backg… |
CVE-2025-10210 | Medium | 6.3 | 2025-09-10 | A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manip… |
CVE-2025-10197 | Medium | 6.3 | 2025-09-10 | A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-10107 | Medium | 4.7 | 2025-09-09 | A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of… |
CVE-2025-7350 | | 2025-09-09 | A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by upload… |