CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,772 vulnerabilities with CWE-89
CVE-2023-1564 MEDIUM
SourceCodester Air Cargo Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1563 MEDIUM
SourceCodester Student Study Center Desk Management System 1.0 - SQ...
CVSS 6.3
CVE-2023-1556 MEDIUM
SourceCodester Judging Management System 1.0 - SQL Injection
CVSS 6.3
CVE-2023-25684 MEDIUM
IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, 4.1.1 - SQL Injection
CVSS 6.5
CVE-2023-27570 CRITICAL
PrestaShop eo_tags < 1.4.19 - SQL Injection via _ga Cookie
CVSS 9.8
CVE-2023-27569 CRITICAL
PrestaShop eo_tags < 1.3.0 - SQL Injection via HTTP User-Agent or Referer Header
CVSS 9.8
CVE-2023-27871 HIGH
IBM Aspera Faspex < 4.4.2 - SQL Injection
CVSS 7.5
CVE-2023-1153 CRITICAL
Pacsrapor < 1.22 - SQL Injection and Command Execution
CVSS 9.8
CVE-2023-1545 HIGH
nilsteampassnet/teampass <3.0.0.23 - SQL Injection
CVSS 7.5
CVE-2023-0631 HIGH
Paid Memberships Pro < 2.9.12 - SQL Injection via Shortcode Attribute Concatenation
CVSS 8.8
CVE-2023-0630 HIGH
Slimstat Analytics < 4.9.3.3 - Authenticated SQL Injection via Shortcode Attribute Concatenation
CVSS 8.8
CVE-2023-28424 CRITICAL
Soko < 1.0.2 - Unauthenticated SQL Injection via Search q Parameter
CVSS 9.1
CVE-2023-1506 MEDIUM
SourceCodester E-Commerce System 1.0 - SQL Injection
CVSS 5.6
CVE-2023-1505 MEDIUM
SourceCodester E-Commerce System 1.0 - SQL Injection
CVSS 5.0
CVE-2023-1504 MEDIUM
SourceCodester Alphaware Simple E-Commerce System 1.0 - SQL Injection
CVSS 5.6
CVE-2023-1503 MEDIUM
SourceCodester Alphaware Simple E-Commerce System 1.0 - SQL Injection
CVSS 5.6
CVE-2023-1502 MEDIUM
SourceCodester Alphaware Simple E-Commerce System 1.0 - SQL Injection
CVSS 5.6
CVE-2023-1499 MEDIUM
Simple Art Gallery 1.0 - SQL Injection
CVSS 6.3
CVE-2023-1498 MEDIUM
Responsive Hotel Site 1.0 - SQL Injection
CVSS 6.3
CVE-2023-26905 CRITICAL
Alphaware Simple E-Commerce System <1.0 - SQL Injection
CVSS 9.8
CVE-2023-1495 MEDIUM
Rebuild < 3.2.3 - SQL Injection via /admin/robot/approval/list q Parameter
CVSS 6.3
CVE-2023-1494 MEDIUM
IBOS 4.5.5 - SQL Injection via Emailids Parameter in ApiController.php
CVSS 6.3
CVE-2023-1483 MEDIUM
XiaoBingBy TeaCMS <2.0.2 - SQL Injection
CVSS 6.3
CVE-2023-1480 MEDIUM
SourceCodester Monitoring - SQL Injection
CVSS 6.3
CVE-2023-1475 MEDIUM
SourceCodester Canteen Management System 1.0 - SQL Injection
CVSS 6.3
Details
Vulnerabilities 19,772
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits