CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,910 vulnerabilities with CWE-89
CVE-2017-16733
MEDIUM
Ecava IntegraXor <6.1.1030.1 - SQL Injection
CVSS 5.3
CVE-2017-1757
HIGH
IBM Security Guardium 10.0 - SQL Injection
CVSS 8.8
CVE-2017-17779
CRITICAL
Paid To Read Script 2.0.5 - SQL Injection via Referrals.php ID Parameter
CVSS 9.8
CVE-2017-15875
CRITICAL
GPWeb 8.4.61 - SQL Injection via Password Recovery Checkemail Parameter
CVSS 9.8
CVE-2017-17721
CRITICAL
ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 - SQL Injection via Multiple Parameters
CVSS 9.8
CVE-2017-17651
CRITICAL
Paid To Read Script 2.0.5 - SQL Injection via Admin Panel Parameters
CVSS 9.8
CVE-2017-17645
CRITICAL
Bus Booking Script 1.0 - SQL Injection via txtname Parameter
CVSS 9.8
CVE-2017-17643
CRITICAL
FS Lynda Clone 1.0 - SQL Injection via Keywords Parameter
CVSS 9.8
CVE-2017-17731
CRITICAL
DedeCMS 5.7 - SQL Injection
CVSS 9.8
CVE-2017-17730
CRITICAL
dedecms < 5.7 - SQL Injection via Logo Parameter
CVSS 9.8
CVE-2017-17713
CRITICAL
boxug/trape < 2017-11-05 - SQL Injection via Multiple Parameters
CVSS 9.8
CVE-2017-17695
HIGH
Techno - Portfolio Management Panel < 2017-11-16 - SQL Injection via Search Parameter
CVSS 8.8
CVE-2017-5663
HIGH
Apache Fineract <=0.6.0-incubating Authenticated SQL Injection via sqlSearch
CVSS 8.8
CVE-2017-17648
CRITICAL
Entrepreneur Dating Script 2.0.1 - SQL Injection via search_result.php Parameters
CVSS 9.8
CVE-2017-17642
CRITICAL
Basic Job Site Script 2.0.5 - SQL Injection via Keyword Parameter
CVSS 9.8
CVE-2017-17641
CRITICAL
resume_clone_script 2.0.5 - SQL Injection via preview.php id Parameter
CVSS 9.8
CVE-2017-17640
CRITICAL
Advanced World Database 2.0.5 - SQL Injection via city.php or state.php Parameter
CVSS 9.8
CVE-2017-17639
CRITICAL
Muslim Matrimonial Script 3.02 - SQL Injection via success-story.php succid Parameter
CVSS 9.8
CVE-2017-17638
CRITICAL
Groupon Clone Script 3.01 - SQL Injection via city_ajax.php state_id Parameter
CVSS 9.8
CVE-2017-17637
CRITICAL
Car Rental Script 2.0.4 - SQL Injection via countrycode1.php val Parameter
CVSS 9.8
CVE-2017-17636
CRITICAL
MLM Forced Matrix 2.0.9 - SQL Injection via News Detail newid Parameter
CVSS 9.8
CVE-2017-17635
CRITICAL
MLM Forex Market Plan Script 2.0.4 - SQL Injection via news_detail.php newid or event_detail.php eventid Parameter
CVSS 9.8
CVE-2017-17634
CRITICAL
Single Theater Booking Script 3.2.1 - SQL Injection via findcity.php q Parameter
CVSS 9.8
CVE-2017-17633
CRITICAL
Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection via moid or eid Parameter
CVSS 9.8
CVE-2017-17632
CRITICAL
Responsive Events And Movie Ticket Booking Script 3.2.1 - SQL Injection via findcity.php q Parameter
CVSS 9.8
Details
Vulnerabilities
19,910
Exploit Likelihood
High