CWE-89
High likelihoodImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
19,913 vulnerabilities with CWE-89
CVE-2017-11445
CRITICAL
Subrion CMS < 4.1.4 - SQL Injection via POST Array
CVSS 9.8
CVE-2017-11444
CRITICAL
Subrion CMS < 4.1.4 - SQL Injection via Search GET Parameter
CVSS 9.8
CVE-2017-11419
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via Editor POST Parameters
CVSS 9.8
CVE-2017-11418
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via GET Parameters
CVSS 9.8
CVE-2017-11417
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via article_status.php GET Parameter
CVSS 9.8
CVE-2017-11416
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via Name Parameter
CVSS 9.8
CVE-2017-11415
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via sys_article.php POST Parameters
CVSS 9.8
CVE-2017-11414
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via Comment System Parameters
CVSS 9.8
CVE-2017-11413
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via Comment Status Controller
CVSS 9.8
CVE-2017-11412
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via comment_status.php id Parameter
CVSS 9.8
CVE-2017-7681
HIGH
Apache OpenMeetings 1.0.0 - SQL Injection
CVSS 8.8
CVE-2017-2241
MEDIUM
Hammock AssetView for MacOS <= 9.2.0 - SQL Injection via File Transfer Web Service
CVSS 6.3
CVE-2017-1183
HIGH
IBM Tivoli Monitoring Portal <6 - SQL Injection
CVSS 7.5
CVE-2017-11354
CRITICAL
Fiyo CMS 2.0.7 - SQL Injection via Tag Name Parameter
CVSS 9.8
CVE-2017-11329
CRITICAL
GLPI < 9.1.4 - SQL Injection via Entity Restrict Parameter
CVSS 9.8
CVE-2017-1000067
HIGH
MODX Revolution <2.5.6 - SQL Injection
CVSS 8.8
CVE-2017-1000060
CRITICAL
EyesOfNetwork EON <5.1 - SQL Injection
CVSS 9.8
CVE-2017-1000031
HIGH
Cacti 0.8.8b - SQL Injection via graph_template_input_id and graph_template_id Parameters
CVSS 8.8
CVE-2017-1000004
CRITICAL
ATutor < 2.2.1 - SQL Injection in Multiple Components
CVSS 9.8
CVE-2017-11200
HIGH
FineCMS through 2017-07-12 - SQL Injection via visitor_ip Parameter
CVSS 8.8
CVE-2017-11174
CRITICAL
XOOPS 2.5.8.1 - SQL Injection via Database Settings Page
CVSS 9.8
CVE-2017-8002
HIGH
EMC Data Protection Advisor < 6.4 - Authenticated Blind SQL Injection
CVSS 8.8
CVE-2017-1175
CRITICAL
IBM Maximo Asset Management <7.1,7.5,7.6 - SQL Injection
CVSS 9.8
CVE-2017-1269
CRITICAL
IBM Security Guardium 10.0-10.1 - SQL Injection
CVSS 9.8
CVE-2017-6698
MEDIUM
Cisco Prime Infrastructure and Evolved Programmable Network Manager - Authenticated SQL Injection
CVSS 5.4
Details
Vulnerabilities
19,913
Exploit Likelihood
High