CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,962 vulnerabilities with CWE-89
CVE-2008-4521
World of Warcraft tracker infusion module 2.0 - SQL Injection via INFO_RAID_ID Parameter
CVE-2008-4518
Fastpublish CMS 1.9.9.9.9 d - SQL Injection via Sprache or Artikel Parameter
CVE-2008-4517
geccBBlite 2.0 - SQL Injection via leggi.php id Parameter
CVE-2008-4516
Galerie 3.2 - SQL Injection via pic Parameter
CVE-2008-4498
Phpautos - SQL Injection
CVE-2008-4497
Built2Go Real Estate Listings 1.5 - SQL Injection via event_id Parameter
CVE-2008-4496
PHP Realtor 1.5 - SQL Injection via view_cat.php v_cat Parameter
CVE-2008-4495
PHP Auto Dealer 2.7 - SQL Injection via view_cat.php v_cat Parameter
CVE-2008-4494
TorrentTrader Classic <= 1.08 - SQL Injection via id Parameter
CVE-2008-4492
YourOwnBux 4.0 - SQL Injection via usNick Cookie
CVE-2008-4487
Atarone CMS 1.2.0 - SQL Injection via ap-save.php Parameters
CVE-2008-3063
V-webmail 1.5.0 - SQL Injection via Username Parameter
CVE-2008-4469
Vastal I-Tech Freelance Zone - SQL Injection via coder_id Parameter
CVE-2008-4468
Vastal I-Tech Share Zone - SQL Injection via view_news.php id Parameter
CVE-2008-4467
Vastal I-Tech Toner Cart - SQL Injection via show_series_ink.php id Parameter
CVE-2008-4466
Vastal I-Tech Cosmetics Zone - SQL Injection via cat_id Parameter
CVE-2008-4465
Vastal I-Tech DVD Zone - SQL Injection via view_mags.php cat_id Parameter
CVE-2008-4464
Vastal I-Tech Mag Zone - SQL Injection via view_mags.php cat_id Parameter
CVE-2008-4463
Vastal I-Tech Jobs Zone - SQL Injection via view_news.php news_id Parameter
CVE-2008-4462
Vastal I-Tech Visa Zone - SQL Injection via view_news.php news_id Parameter
CVE-2008-4461
Vastal I-Tech Dating Zone - SQL Injection via fage Parameter
CVE-2008-4460
Vastal I-Tech MMORPG Zone - SQL Injection via game_id Parameter
CVE-2008-4459
eXtrovert Thyme 1.3 - SQL Injection via uname_search Parameter
CVE-2008-4458
E-Php B2B Trading Marketplace Script - SQL Injection via listings.php cid Parameter
CVE-2008-4457
MemHT Portal < 3.9.0 - SQL Injection via stats_res Cookie
Details
Vulnerabilities 19,962
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits