CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,800 vulnerabilities with CWE-89
CVE-2022-36256 HIGH
sazanrjb InventoryManagementSystem 1.0 - SQL Injection
CVSS 7.5
CVE-2022-36255 HIGH
sazanrjb InventoryManagementSystem 1.0 - SQL Injection
CVSS 7.5
CVE-2022-37794 CRITICAL
Library Management System 1.0 - SQL Injection via id_no Parameter in in-card.php
CVSS 9.8
CVE-2022-38615 HIGH
SmartVista SVFE2 <2.2.22 - SQL Injection
CVSS 8.8
CVE-2022-38286 HIGH
JFinal CMS 5.1.0 - SQL Injection via /system/role/list
CVSS 7.2
CVE-2022-38285 HIGH
jfinal_cms 5.1.0 - SQL Injection via /system/menu/list
CVSS 7.2
CVE-2022-38284 HIGH
JFinal CMS 5.1.0 - SQL Injection via Department List Endpoint
CVSS 7.2
CVE-2022-38283 HIGH
JFinal CMS 5.1.0 - SQL Injection via Admin Video List Endpoint
CVSS 7.2
CVE-2022-38282 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/videoalbum/list
CVSS 7.2
CVE-2022-38281 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/site/list
CVSS 7.2
CVE-2022-38280 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/image/list
CVSS 7.2
CVE-2022-38279 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/imagealbum/list
CVSS 7.2
CVE-2022-38278 HIGH
JFinal CMS 5.1.0 - SQL Injection via Friendly Link List Endpoint
CVSS 7.2
CVE-2022-38277 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/folderrollpicture/list
CVSS 7.2
CVE-2022-38276 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/foldernotice/list
CVSS 7.2
CVE-2022-38275 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/contact/list
CVSS 7.2
CVE-2022-38274 HIGH
JFinal CMS 5.1.0 - SQL Injection via /admin/comment/list
CVSS 7.2
CVE-2022-38273 HIGH
jfinal_cms 5.1.0 - SQL Injection via /admin/article/list_approve
CVSS 7.2
CVE-2022-38272 HIGH
jfinal_cms 5.1.0 - SQL Injection via Article List Endpoint
CVSS 7.2
CVE-2022-38269 HIGH
School Activity Updates with SMS Notification <1.0 - SQL Injection
CVSS 7.2
CVE-2022-38268 HIGH
School Activity Updates with SMS Notification <1.0 - SQL Injection
CVSS 7.2
CVE-2022-38267 HIGH
School Activity Updates with SMS Notification <v1.0 - SQL Injection
CVSS 7.2
CVE-2022-38265 HIGH
Apartment Visitor Management System v1.0 - SQL Injection
CVSS 7.2
CVE-2022-38260 HIGH
Interview Management System v1.0 - SQL Injection
CVSS 7.2
CVE-2022-38255 HIGH
Interview Management System v1.0 - SQL Injection
CVSS 7.2
Details
Vulnerabilities 19,800
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits