CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,772 vulnerabilities with CWE-89
CVE-2023-29598 CRITICAL
lmxcms v1.4.1 - SQL Injection via setbook Parameter
CVSS 9.8
CVE-2023-29597 HIGH
bloofoxcms 0.5.2 - SQL Injection via Edit Page EID Parameter
CVSS 8.8
CVE-2023-27032 CRITICAL
Prestashop advancedpopupcreator <1.1.24 - SQL Injection
CVSS 9.8
CVE-2023-1987 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1986 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1985 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1984 MEDIUM
SourceCodester Complaint Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1983 MEDIUM
SourceCodester Sales Tracker Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-30465 MEDIUM
Apache InLong 1.4.0-1.5.0 - SQL Injection via orderType Parameter
CVSS 5.3
CVE-2023-1969 MEDIUM
SourceCodester Online Eyewear Shop 1.0 - SQL Injection
CVSS 6.3
CVE-2023-26860 HIGH
PrestaShop Igbudget <1.0.3 - SQL Injection
CVSS 8.8
CVE-2023-1964 HIGH
PHPGurukul Bank Locker Management System 1.0 - SQL Injection
CVSS 7.3
CVE-2023-1963 MEDIUM
PHPGurukul Bank Locker Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1962 HIGH
SourceCodester Best Online News Portal 1.0 - SQL Injection
CVSS 7.3
CVE-2023-1960 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1959 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1958 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1957 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1955 HIGH
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 7.3
CVE-2023-1954 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1953 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1952 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1951 MEDIUM
SourceCodester Online Computer and Laptop Store 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1950 MEDIUM
PHPGurukul BP Monitoring Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1949 MEDIUM
PHPGurukul BP Monitoring Management System 1.0 - SQL Injection
CVSS 6.3
Details
Vulnerabilities 19,772
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits