CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,723 vulnerabilities with CWE-89
CVE-2023-54163 HIGH
NLB mKlik Makedonija 3.3.12 - SQL Injection via International Transfer Parameters
CVSS 7.5
CVE-2023-36525 HIGH
WPJobBoard < 5.9.0 - Unauthenticated Blind SQL Injection
CVSS 8.6
CVE-2023-53982 HIGH
PMB 7.4.6 - SQL Injection via ajax.php Storage Parameter
CVSS 7.5
CVE-2023-53975 HIGH
Atom CMS 2.0 - SQL Injection
CVSS 7.5
CVE-2023-53972 HIGH
WebTareas 2.4 - Unauthenticated SQL Injection via webTareasSID Cookie Parameter
CVSS 7.5
CVE-2023-53960 CRITICAL
SOUND4 IMPACT/FIRST/PULSE/Eco 2.x - SQL Injection
CVSS 9.8
CVE-2023-53935 MEDIUM
WBiz Desk 1.2 - SQL Injection via Ticket PHP tk Parameter
CVSS 5.4
CVE-2023-53926 CRITICAL
PHPJabbers Simple CMS 5.0 - SQL Injection
CVSS 9.8
CVE-2023-53917 MEDIUM
Affiliate Me <5.0.1 - SQL Injection
CVSS 6.5
CVE-2023-53877 CRITICAL
Bus Reservation System 1.1 - SQL Injection
CVSS 9.8
CVE-2023-38913 MEDIUM
anirbandutta9 NEWS-BUZZ 1.0 - SQL Injection
CVSS 5.3
CVE-2023-36338 MEDIUM
Inventory Management System 1 - SQL Injection
CVSS 5.3
CVE-2023-53734 HIGH
dawa-pharma 1.0-2022 - Unauthenticated SQL Injection via Email Parameter
CVE-2023-49440 HIGH
AhnLab EPP 1.0.15 - SQL Injection via Preview Parameter
CVSS 8.8
CVE-2023-41532 HIGH
Hospital Management System v4 - SQL Injection
CVSS 8.8
CVE-2023-41531 HIGH
Hospital Management System v4 - SQL Injection
CVSS 8.8
CVE-2023-41530 CRITICAL
Hospital Management System v4 - SQL Injection
CVSS 9.8
CVE-2023-41528 CRITICAL
Hospital Management System v4 - SQL Injection
CVSS 9.8
CVE-2023-41527 CRITICAL
Hospital Management System v4 - SQL Injection
CVSS 9.8
CVE-2023-41526 CRITICAL
Hospital Management System v4 - SQL Injection
CVSS 9.8
CVE-2023-41525 CRITICAL
Hospital Management System v4 - SQL Injection
CVSS 9.8
CVE-2023-41524 HIGH
Student Attendance Management System v1 - SQL Injection
CVSS 8.8
CVE-2023-41523 HIGH
Student Attendance Management System v1 - SQL Injection
CVSS 8.8
CVE-2023-41522 HIGH
Student Attendance Management System v1 - SQL Injection
CVSS 8.8
CVE-2023-41521 HIGH
Student Attendance Management System v1 - SQL Injection
CVSS 8.8
Details
Vulnerabilities 19,723
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits