CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,718 vulnerabilities with CWE-89
CVE-2024-29876 CRITICAL
Sentrifugo 3.2 - SQL Injection via Reports Activity Log Sort Parameter
CVSS 9.8
CVE-2024-29875 CRITICAL
Sentrifugo 3.2 - SQL Injection via Reports Export Sort Name Parameter
CVSS 9.8
CVE-2024-29874 CRITICAL
Sentrifugo 3.2 - SQL Injection via Reports Active User PDF Sort Name Parameter
CVSS 9.8
CVE-2024-29873 CRITICAL
Sentrifugo 3.2 - SQL Injection via Business Units Report bunitname Parameter
CVSS 9.8
CVE-2024-29872 CRITICAL
Sentrifugo 3.2 - SQL Injection via Agencyids Parameter
CVSS 9.8
CVE-2024-29871 CRITICAL
Sentrifugo 3.2 - SQL Injection via 'id' Parameter
CVSS 9.8
CVE-2024-29870 CRITICAL
Sentrifugo 3.2 - SQL Injection via Business ID Parameter
CVSS 9.8
CVE-2024-29732 CRITICAL
SCAN_VISIO eDocument Suite Web Viewer - SQL Injection
CVSS 9.8
CVE-2024-2713 MEDIUM
Campcodes Complete Online DJ Booking System 1.0 - SQL Injection via Booking Search Parameter
CVSS 6.3
CVE-2024-2712 MEDIUM
Campcodes Complete Online DJ Booking System 1.0 - SQL Injection via /admin/user-search.php searchdata Parameter
CVSS 6.3
CVE-2024-2015 MEDIUM
ZhiCms 4.0 - SQL Injection via getindexdata Function Key Parameter
CVSS 6.3
CVE-2024-2014 HIGH
Panabit Panalog 202103080942 - SQL Injection via /Maintain/sprog_upstatus.php id Parameter
CVSS 7.3
CVE-2024-25239 CRITICAL
Sourcecodester Employee Management System v1.0 - SQL Injection
CVSS 9.8
CVE-2024-24813 HIGH
Frappe <14.64.0, 15.0.0 - SQL Injection
CVSS 7.5
CVE-2024-24110 MEDIUM
crmeb_java < 1.3.4 - SQL Injection via /api/front/spread/people GET Request
CVSS 6.5
CVE-2024-2714 MEDIUM
Campcodes Complete Online DJ Booking System 1.0 - SQL Injection via fromdate Parameter
CVSS 6.3
CVE-2024-28395 CRITICAL
bestkit_popup < 1.7.2 - SQL Injection via bestkit_popup.php
CVSS 9.8
CVE-2024-28392 CRITICAL
Abandoned Cart Reminder Pro < 2.0.11 - SQL Injection via setEmailVisualized Method
CVSS 9.8
CVE-2024-2687 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-2678 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-2677 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-1711 CRITICAL
Create by Mediavine <1.9.4 - SQL Injection
CVSS 9.8
CVE-2024-2676 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-2675 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
CVE-2024-2674 MEDIUM
Campcodes Online Job Finder System 1.0 - SQL Injection
CVSS 6.3
Details
Vulnerabilities 19,718
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits