CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,807 vulnerabilities with CWE-89
CVE-2022-1556 CRITICAL
StaffList WordPress Plugin < 3.1.5 - Authenticated SQL Injection via Staff Search Parameter
CVSS 9.8
CVE-2022-30516 CRITICAL
Hospital Management System 1.0 - SQL Injection via doctor.php editid Parameter
CVSS 9.8
CVE-2022-30493 CRITICAL
Automotive Shop Management System 1.0 - SQL Injection via Product ID Parameter
CVSS 9.8
CVE-2022-30500 CRITICAL
jfinal_cms 5.1.0 - SQL Injection
CVSS 9.8
CVE-2022-29689 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29688 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29687 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29686 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29685 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 8.8
CVE-2022-29684 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29683 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29682 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29681 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29680 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29676 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29670 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29669 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 8.8
CVE-2022-29667 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via /admin.php/pic/admin/pic/hy
CVSS 8.8
CVE-2022-29666 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29665 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29664 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 8.8
CVE-2022-29663 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29662 HIGH
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29661 HIGH
CSCMS Music Portal System v4.2 - Blind SQL Injection via id Parameter
CVSS 7.2
CVE-2022-29660 CRITICAL
CSCMS Music Portal System v4.2 - SQL Injection via id Parameter
CVSS 9.8
Details
Vulnerabilities 19,807
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits