CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,718 vulnerabilities with CWE-89
CVE-2024-30801 MEDIUM
Cloud based customer service management platform <1.0.0 - SQL Injec...
CVSS 5.5
CVE-2024-28279 HIGH
Code-projects Computer Book Store 1.0 - SQL Injection via bookisbn Parameter
CVSS 7.3
CVE-2024-25533 CRITICAL
RuvarOA <6.01, 12.01 - Info Disclosure
CVSS 9.4
CVE-2024-25532 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25528 MEDIUM
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 5.9
CVE-2024-31961 CRITICAL
Sonic Shopfloor.guide <3.1.3 - SQL Injection
CVSS 9.8
CVE-2024-25531 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25530 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25529 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25527 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.4
CVE-2024-4654 MEDIUM
BlueNet Technology Clinical Browsing System 1.2.1 - SQL Injection via INSTI_CODE Parameter
CVSS 6.3
CVE-2024-4653 MEDIUM
BlueNet Technology Clinical Browsing System 1.2.1 - SQL Injection via /xds/outIndex.php name Parameter
CVSS 6.3
CVE-2024-26026 HIGH
F5 BIG-IP Next Central Manager 20.0.1-20.1.x - SQL Injection via API URI
CVSS 7.5
CVE-2024-25526 HIGH
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 8.1
CVE-2024-25525 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25524 CRITICAL
RuvarOA v6.01-v12.01 - SQL Injection
CVSS 9.4
CVE-2024-25523 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25522 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.4
CVE-2024-25521 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.4
CVE-2024-25520 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25519 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25518 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.4
CVE-2024-25517 CRITICAL
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 9.8
CVE-2024-25515 HIGH
RuvarOA <6.01, 12.01 - SQL Injection
CVSS 7.3
CVE-2024-21793 HIGH
F5 BIG-IP Next Central Manager 20.0.1-20.1.x - SQL Injection via OData API
CVSS 7.5
Details
Vulnerabilities 19,718
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits