CWE-89: SQL Injection
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Also known as Improper Neutralization of Special Elements used in an SQL Command, SQLi.
A kind of CWE-943 NoSQL Injection, NoSQLi.
From the CWE List. © The MITRE Corporation.
Newest
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_class1.php sql injection6.9 Medium
- code-projects real state servicescode-projects Real State Services single-list_sale.php add sql injection6.9 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php add sql injection6.9 Medium
- itsourcecode online hotel management systemitsourcecode Online Hotel Management System controller.php edit sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System editBaptism.php sql injection6.9 Medium
- itsourcecode baptism information management systemitsourcecode Baptism Information Management System delbaptism.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctortimings.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorprofile.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System doctorchangepassword.php sql injection5.3 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System departmentDoctor.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System department.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentdetail.php sql injection5.3 Medium
- No product listedYzmCMS index.php sql injection6.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview4.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System edit_class.php sql injection6.9 Medium
- codeastro human resource management systemCodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview5.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System Appointment appointmentapproval.php sql injection5.3 Medium
- joomcoder joomcck, joomcoder.com joomcck extension for joomla +1 moreJoomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.18.7 High
- yashpokharna2555 restaurent-management-systemyashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection6.9 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System appointment.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System ajaxmedicine.php sql injection5.3 Medium
- itsourcecode hospital management systemitsourcecode Hospital Management System adminprofile.php sql injection5.1 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview7.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System archive.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview6.php sql injection6.9 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System preview.php sql injection6.9 Medium
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationGroundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter6.5 Medium
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationGroundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter6.5 Medium
- opf openprojectOpenProject: SQL injection in timestamps functionality9.9 Critical
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability8.5 High
- igor benic recipe maker for your food blog from zip recipesWordPress Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.2.7 - SQL Injection vulnerability8.5 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability8.5 High
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability8.5 High
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability8.5 High
- af themes wp post authorWordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability8.5 High
- bestwebsoft galleryWordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability8.5 High
- tomdever wpforo forumWordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability8.5 High
- ays pro popup boxWordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability7.6 High
- soflyy wp all import, wp all import all import +1 moreWordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability7.6 High
- themehunk advance product searchWordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability9.3 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability9.3 Critical
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerability9.3 Critical
- themefic tourficWordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability8.5 High
- oooorgle quotes llamaWordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability9.3 Critical
- codemstory 워드프레스 결제 심플페이WordPress 워드프레스 결제 심플페이 plugin <= 5.5.6 - SQL Injection vulnerability9.3 Critical
- online web tutor library management systemWordPress Library Management System plugin <= 3.5.7 - SQL Injection vulnerability9.3 Critical
- ayecode ltd geodirectoryWordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability9.3 Critical
- contempo themes real estate 7WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…