CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,913 vulnerabilities with CWE-89
CVE-2015-10056 MEDIUM
vinylmaps < 2015-03-23 - SQL Injection via contact Function in recordstoreapp/views.py
CVSS 5.5
CVE-2015-10055 MEDIUM
PictureThisWebServer - SQL Injection
CVSS 5.5
CVE-2015-10054 MEDIUM
P2Manage < 2015-05-15 - SQL Injection via Execute Function in Database.cs
CVSS 5.5
CVE-2015-10053 MEDIUM
Prodigasistemas Curupira <0.1.3 - SQL Injection
CVSS 5.5
CVE-2015-10051 MEDIUM
bony2023 Discussion-Board - SQL Injection
CVSS 5.5
CVE-2015-10050 MEDIUM
brandonfire miRNA_Database_by_PHP_MySql - SQL Injection
CVSS 5.5
CVE-2015-10048 MEDIUM
bmattoso desafio_buzz_woody - SQL Injection
CVSS 5.5
CVE-2015-10047 MEDIUM
KYUUBl school-register - SQL Injection
CVSS 5.5
CVE-2015-10046 MEDIUM
lolfeedback < 2015-01-03 - SQL Injection
CVSS 5.5
CVE-2015-10045 MEDIUM
tutrantta project_todolist - SQL Injection
CVSS 5.5
CVE-2015-10044 MEDIUM
sqldump < 2015-01-24 - SQL Injection
CVSS 5.5
CVE-2015-10020 MEDIUM
ssn2013 cis450Project - SQL Injection
CVSS 5.5
CVE-2015-10042 MEDIUM
aibattle < 2015-08-10 - SQL Injection via postLogin Argument in registerUser Function
CVSS 5.5
CVE-2015-10041 MEDIUM
aibattle < 2015-08-11 - SQL Injection via sendComments Function
CVSS 5.5
CVE-2015-10039 MEDIUM
dobos domino <0.1.5524.38553 - SQL Injection
CVSS 5.5
CVE-2015-10038 MEDIUM
pplv2 - SQL Injection
CVSS 5.5
CVE-2015-10037 MEDIUM
aci_escola < 2015-03-12 - SQL Injection
CVSS 5.5
CVE-2015-10036 MEDIUM
kylebebak dronfelipe - SQL Injection
CVSS 5.5
CVE-2015-10035 MEDIUM
gperson angular-test-reporter - SQL Injection
CVSS 5.5
CVE-2015-10034 MEDIUM
j-nowak workout-organizer - SQL Injection
CVSS 5.5
CVE-2015-10031 MEDIUM
purpleparrots 491-Project - SQL Injection
CVSS 5.5
CVE-2015-10026 MEDIUM
tiredtyrant flairbot - SQL Injection
CVSS 5.5
CVE-2015-10023 MEDIUM
Fumon trello-octometric - SQL Injection
CVSS 5.5
CVE-2015-10022 MEDIUM
IISH nlgis2 < 2015-01-14 - SQL Injection in custom_import.pl
CVSS 5.5
CVE-2015-10018 MEDIUM
DBRisinajumi d2files <1.0.0 - SQL Injection
CVSS 5.5
Details
Vulnerabilities 19,913
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits