CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,889 vulnerabilities with CWE-89
CVE-2018-6368
CRITICAL
JomEstate PRO < 3.7 - SQL Injection via id Parameter in task=detailed Action
CVSS 9.8
CVE-2018-6006
CRITICAL
JS Autoz 1.0.9 - SQL Injection via vtype, pre, or prs Parameter
CVSS 9.8
CVE-2018-6005
CRITICAL
realpin < 1.5.04 - SQL Injection via Pinboard Parameter
CVSS 9.8
CVE-2018-6004
CRITICAL
Joomla! File Download Tracker 3.0 - SQL Injection
CVSS 9.8
CVE-2018-5994
CRITICAL
JS Jobs 1.1.9 - SQL Injection via Zipcode or ta Parameter
CVSS 9.8
CVE-2018-5993
CRITICAL
aist < 2.0 - SQL Injection via id Parameter in showvacancy Request
CVSS 9.8
CVE-2018-5992
CRITICAL
Staff Master < 1.0 - SQL Injection via Name Parameter
CVSS 9.8
CVE-2018-5991
CRITICAL
Joomla! Form Maker 3.6.12 - SQL Injection
CVSS 9.8
CVE-2018-5990
CRITICAL
AllVideos Reloaded <1.2.x - SQL Injection
CVSS 9.8
CVE-2018-5989
CRITICAL
ccNewsletter 2.x - Joomla! - SQL Injection
CVSS 9.8
CVE-2018-5987
CRITICAL
Pinterest Clone Social Pinboard 2.0 - SQL Injection
CVSS 9.8
CVE-2018-5983
CRITICAL
jquickcontact 1.3.2.2.1 - SQL Injection via task=refresh&sid= Request
CVSS 9.8
CVE-2018-5982
CRITICAL
Advertisement Board 3.1.0 - Joomla! - SQL Injection
CVSS 9.8
CVE-2018-5981
CRITICAL
Gallery WD 1.3.6 - SQL Injection via tag_id or gallery_id Parameter
CVSS 9.8
CVE-2018-5980
CRITICAL
Solidres 2.5.1 - SQL Injection via Hub Search Direction Parameter
CVSS 9.8
CVE-2018-5975
CRITICAL
Joomla! Smart Shoutbox 3.0.0 - SQL Injection
CVSS 9.8
CVE-2018-5974
CRITICAL
SimpleCalendar 3.1.9 - SQL Injection
CVSS 9.8
CVE-2018-5971
CRITICAL
MediaLibrary Free 4.0.12 - SQL Injection
CVSS 9.8
CVE-2018-5970
CRITICAL
JGive 2.0.9 - SQL Injection via filter_org_ind_type or campaign_countries Parameter
CVSS 9.8
CVE-2018-6928
CRITICAL
News Website Script 2.0.4 - SQL Injection via Search Term
CVSS 9.8
CVE-2018-6893
CRITICAL
FineCMS 5.2.0 - SQL Injection via 'module' Parameter in API Controller
CVSS 9.8
CVE-2018-6863
CRITICAL
Select Your College Script 2.0.2 - SQL Injection via Login Parameter
CVSS 9.8
CVE-2018-1000044
CRITICAL
Security Onion Solutions Squert <1.6.7 - SQL Injection
CVSS 9.8
CVE-2018-3607
HIGH
Trend Micro Control Manager 6.0 - SQL Injection via XXXTreeNode Method
CVSS 8.8
CVE-2018-3606
HIGH
Trend Micro Control Manager 6.0 - SQLi & RCE via Multiple Methods
CVSS 8.8
Details
Vulnerabilities
19,889
Exploit Likelihood
High