CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,889 vulnerabilities with CWE-89
CVE-2018-5973 CRITICAL
Professional Local Directory Script 1.0 - SQL Injection
CVSS 9.8
CVE-2018-6308 CRITICAL
SugarCRM Community Edition <= 6.5.26 - SQL Injection via Multiple Parameters
CVSS 9.8
CVE-2018-5443 MEDIUM
Advantech WebAccess/SCADA <V8.2_20170817 - SQL Injection
CVSS 5.3
CVE-2018-5778 CRITICAL
Ipswitch WhatsUp Gold <17.1.1 - SQL Injection
CVSS 9.8
CVE-2018-5988 CRITICAL
Flexible Poll 1.2 - SQL Injection via id Parameter
CVSS 9.8
CVE-2018-5986 CRITICAL
Easy Car Script 2014 - SQL Injection
CVSS 9.8
CVE-2018-5985 CRITICAL
LiveCRM SaaS Cloud 1.0 - SQL Injection
CVSS 9.8
CVE-2018-5984 CRITICAL
Tumder 2.1 - Joomla! - SQL Injection
CVSS 9.8
CVE-2018-5979 CRITICAL
Wchat Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection
CVSS 9.8
CVE-2018-5978 CRITICAL
Facebook Style Php Ajax Chat Zechat 1.5 - SQL Injection
CVSS 9.8
CVE-2018-5977 CRITICAL
Affiligator Affiliate Webshop Mgmt Sys <2.1.0 - SQL Injection
CVSS 9.8
CVE-2018-5972 CRITICAL
Classified Ads CMS Quickad 4.0 - SQL Injection
CVSS 9.8
CVE-2018-5960 HIGH
Zenario 7.1-7.6 - SQL Injection via Categories Edit Name Input
CVSS 8.8
CVE-2018-5697 HIGH
Icy Phoenix 2.2.0.105 - SQL Injection
CVSS 7.2
CVE-2018-5696 CRITICAL
iJoomla com_adagency <6.0.9 - SQL Injection
CVSS 9.8
CVE-2018-5695 HIGH
WpJobBoard 4.4.4 - WordPress - SQL Injection
CVSS 7.2
CVE-2018-5315 CRITICAL
Wachipi WP Events Calendar <1.0 - SQL Injection
CVSS 9.8
CVE-2018-5374 HIGH
WordPress Dbox 3D Slider Lite <1.2.2 - SQL Injection
CVSS 8.8
CVE-2018-5373 HIGH
Smooth Slider <2.8.6 - SQL Injection
CVSS 8.8
CVE-2018-5372 HIGH
Testimonial Slider <1.2.4 - SQL Injection
CVSS 8.8
CVE-2018-5211 CRITICAL
PHP Melody 2.7.1 - SQL Injection via Playlist Parameter
CVSS 9.8
CVE-2018-3811 CRITICAL
Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection via oId Parameter
CVSS 9.8
CVE-2017-20282 HIGH
Joomla! Component jCart for OpenCart 2.0 SQL Injection
CVSS 8.2
CVE-2017-20281 HIGH
Joomla! Component Extra Search 2.2.8 SQL Injection
CVSS 8.2
CVE-2017-20280 HIGH
Joomla Component Myportfolio 3.0.2 SQL Injection via pid Parameter
CVSS 8.2
Details
Vulnerabilities 19,889
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits