CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,816 vulnerabilities with CWE-89
CVE-2022-26349
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - Blind SQL Injection
CVSS 9.8
CVE-2022-26338
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-26069
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-26065
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-26059
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-26013
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-25980
CRITICAL
Delta Electronics DIAEnergie <1.8.02.004 - SQL Injection
CVSS 9.8
CVE-2022-25880
CRITICAL
Delta Electronics DIAEnergie < 1.8.02.004 - SQL Injection via HandlerTag_KID.ashx
CVSS 9.8
CVE-2022-0923
CRITICAL
Delta Electronics DIAEnergie < 1.8.02.004 - SQL Injection via HandlerDialog_KID.ashx
CVSS 9.8
CVE-2022-1083
HIGH
Microfinance Management System - SQL Injection via Customer Type/Account Number Parameters
CVSS 7.3
CVE-2022-1082
HIGH
Microfinance Management System 1.0 - SQL Injection via Login Page Username/Password Parameter
CVSS 7.3
CVE-2022-1080
HIGH
One Church Management System 1.0 - SQL Injection via attendancy.php search2 Parameter
CVSS 7.3
CVE-2022-1078
HIGH
College Website Management System 1.0 - Unauthenticated SQL Injection via id Parameter
CVSS 7.3
CVE-2022-24956
MEDIUM
Shopware B2B-Suite < 1.5.1 - Authenticated SQL Injection via Search Sort Parameter
CVSS 6.5
CVE-2022-0846
CRITICAL
SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQL Injection via id Parameter
CVSS 9.8
CVE-2022-0787
CRITICAL
WordPress Plugin <5.1 - SQL Injection
CVSS 9.8
CVE-2022-0784
CRITICAL
Title Experiments Free WP <9.0.1 - SQL Injection
CVSS 9.8
CVE-2022-0479
CRITICAL
Popup Builder WordPress <4.1.1 - SQL Injection
CVSS 9.8
CVE-2022-23882
CRITICAL
TuziCMS 2.0.6 - SQL Injection in BannerController
CVSS 9.8
CVE-2022-26268
CRITICAL
xiaohuanxiong v1.0 - SQL Injection via id Parameter
CVSS 9.8
CVE-2022-26245
CRITICAL
Falcon-plus v0.3 - SQL Injection via grpName Parameter
CVSS 9.8
CVE-2022-0983
HIGH
moodle 3.9.0-3.9.12 and 3.11.0-3.11.5 - Authenticated SQL Injection in Badges Criteria Configuration
CVSS 8.8
CVE-2022-1064
HIGH
fork-cms < 5.11.1 - SQL Injection via Bulk Spam Marking
CVSS 8.8
CVE-2022-26301
CRITICAL
TuziCMS 2.0.6 - SQL Injection via ZhuantiController
CVSS 9.8
CVE-2022-0153
HIGH
fork-cms < 5.11.1 - SQL Injection
CVSS 7.5
Details
Vulnerabilities
19,816
Exploit Likelihood
High