CWE-89: SQL Injection
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Also known as Improper Neutralization of Special Elements used in an SQL Command, SQLi.
A kind of CWE-943 NoSQL Injection, NoSQLi.
From the CWE List. © The MITRE Corporation.
Newest
- openprojectOpenProject has a SQL Injection via Custom Field Name that can be chained to Remote Code Execution9.1 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration8.8 High
- hackerbay oneuptimeOneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters8.1 High
- kyselySQL Injection via unsanitized JSON path keys when ignoring/silencing compilation errors or using `Kysely<any>`.8.2 High
- vmware spring aiCVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter8.8 High
- kanboardKanboard has Authenticated SQL Injection in Project Permissions Handler8.4 High
- murasoftware mura cmsMura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.9.8 Critical
- murasoftware mura cmsMura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.9.8 Critical
- No product listedMicrosoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation...8.8 High
- glpi-project glpi inventory, glpi-inventory-plugin +1 moreGLPI Inventory Plugin has SQL Injection on dropdown_calendar Report7.1 High
- glpi-project glpiGLPI Vulnerable to Authenticated SQL Injection6.5 Medium
- agentejo cockpitCockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()7.7 High
- carmelo simple food order systemcode-projects Simple Food Order System add-item.php sql injection6.9 Medium
- red hat satellite 6, satellite 6.17 for rhel 9, satellite 6.18 for rhel 9 +1 more +3 moreRubygem-katello: katello: denial of service and potential information disclosure via sql injection5.4 Medium
- wpxpo wowstore – store builder & product blocks for woocommerceWowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter7.5 High
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection6.9 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection6.9 Medium
- admidioAdmidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)8.0 High
- b3log siyuanSiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API9.8 Critical
- chamilo lms, chamilo-lms +1 moreChamilo LMS: SQL Injection in the statistics AJAX endpoint8.8 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php9.3 Critical
- nicolargo glancesGlances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements7.0 High
- ancorathemes unica, hcltech unica audience central +1 moreBoolean-Based SQL Injection in Multiple Unica Components9.8 Critical
- hcl aionHCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.2.2 Low
- itsourcecode college management systemitsourcecode College Management System time-table.php sql injection5.3 Medium
- itsourcecode college management systemitsourcecode College Management System courses.php sql injection5.1 Medium
- hcl aionMultiple security vulnerabilities affect HCL AION4.5 Medium
- itsourcecode free hotel reservation systemitsourcecode Free Hotel Reservation System index.php sql injection6.9 Medium
- itsourcecode online enrollment systemitsourcecode Online Enrollment System index.php sql injection6.9 Medium
- itsourcecode online enrollment systemitsourcecode Online Enrollment System login.php sql injection6.9 Medium
- siteserver sscmsSSCMS DDL SitesAddController.Submit.cs sql injection5.3 Medium
- wakyma, wakyma application web +1 moreNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web5.3 Medium
- wakyma, wakyma application web +1 moreNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web7.1 High
- wakyma, wakyma application web +1 moreNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web7.1 High
- tiandy integrated management platformTiandy Integrated Management Platform getAuthorityByUserId sql injection6.9 Medium
- vanna-ai vannavanna-ai vanna Endpoint __init__.py update_sql sql injection5.3 Medium
- vanna-ai vannavanna-ai vanna bigquery_vector.py remove_training_data sql injection6.9 Medium
- angeljudesuarez payroll management systemitsourcecode Payroll Management System manage_employee.php sql injection6.9 Medium
- chyrpSQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain...7.5 High
- jawherkl node-api-postgresJawherKl node-api-postgres user.js User.getAll sql injection6.9 Medium
- No product listedphpipam Section edit-result.php sql injection5.1 Medium
- next click ventures realtyscriptRealtyScript 4.0.2 Multiple Time-based Blind SQL Injection8.8 High
- nextclickventures realtyscript, next click ventures realtyscripts +1 moreRealtyScript 4.0.2 SQL Injection via u_id and agent Parameters8.8 High
- codephiliax chat2dbCodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection5.3 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter7.7 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection6.5 Medium
- flycart upsellwpWordPress UpsellWP plugin <= 2.2.4 - SQL Injection vulnerability7.6 High
- realmag777 wolfWordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability7.6 High
- codepeople cp contact form with paypalWordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability8.5 High
- Show moreLoading…