CWE-89: SQL Injection
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Also known as Improper Neutralization of Special Elements used in an SQL Command, SQLi.
A kind of CWE-943 NoSQL Injection, NoSQLi.
From the CWE List. © The MITRE Corporation.
Newest
- unknown ukr-to-latUkr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name6.8 Medium
- bannersky bsk pdf managerBSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute6.8 Medium
- nanbu welcart e-commerceWelcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie4.9 Medium
- frappe hrmsFrappe HR: SQL Injection in HRMS Salary Payments via ECS Report6.5 Medium
- kuafuai aipexbaseAipexBase through commit 690adb9 SQL Injection via /api/data/invoke7.1 High
- webvella webvella-erpWebVella ERP through 1.8.8 SQL Injection via EQL Query API7.1 High
- thecosy icecmsIceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum8.7 High
- thecosy icecmsIceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum8.7 High
- izhaorui zr.admin.netZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo.Sort ORDER BY7.1 High
- helicalinsightHelical Insight through 7.0.0 SQL Injection via /executeDatasource8.6 High
- zyx0814 filepressFilePress through 3.0.1 SQL Injection via asc Parameter in filelist.php7.1 High
- pbh-btn peerbanhelperPeerBanHelper: SQL injection via ${field} interpolation in MyBatis mapper for analysis endpoint4.9 Medium
- devolutions server, mariadb +1 moreMariaDB: Insufficient quoting in mariadb-dump and SHOW commands7.7 High
- pt norther lights production mapsvgWordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability8.5 High
- apache software foundation kylinApache Kylin: Missing authentication on certain cache API endpoints9.8 Critical
- tsg profleetSQL injection in TSG Profleet9.3 Critical
- appsbd vitepos – point of sale (pos) for woocommerceVitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter7.5 High
- halfdata green popupsWordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability9.3 Critical
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9 Medium
- unknown affiliate-toolkitaffiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter6.8 Medium
- mobile builder builder, unknown mobile builder +1 moreMobile Builder <= 1.4.2 - Unauthenticated SQLi via 'delivery_id' Parameter6.8 Medium
- unknown wx subscribe 微信支付付费订阅WX Subscribe <= 1.2.1 - Unauthenticated SQLi via 'attach' Parameter6.8 Medium
- appsbd vitepos – point of sale (pos) for woocommerceVitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator6.5 Medium
- getwpfunnels mail mint – email marketing, automation & woocommerce emails with ai assistanceMail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter6.5 Medium
- softaculous backuply – backup, restore, migrate and cloneBackuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation8.0 High
- wpmanageninja fluentcart a new era of ecommerce – faster, lighter, and simplerFluentCart A New Era of eCommerce <= 1.7.0 - Authenticated (Administrator+) SQL Injection via 'products.variants' Array Keys4.9 Medium
- wheelsWheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled ...9.8 Critical
- frappe hrmsFrappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation8.3 High
- mayerbalintdev gym-oneGYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php6.5 Medium
- msgbyte tianjiTianji: SQL Injection via unsanitized timezone parameter in analytics queries8.8 High
- espocrmEspoCRM: Blind SQL injection via streamAttachments where-clause complex expression7.6 High
- link whisper inc whisper free, unknown link whisper free +1 moreWordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability9.3 Critical
- kitae park mang board wpWordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability9.3 Critical
- ameliabooking ameliaWordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability9.3 Critical
- qnap video stationSQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset7.1 High
- qnap video stationSQLi#1 SQL Injection in class_videos.php _getFilters7.1 High
- slican ipxSQL Injection in WebCTI8.7 High
- jackdewey link libraryLink Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter7.5 High
- znunyZnuny through 7.3.6 constructs a ticket-search database query by directly concatenating user...8.6 High
- wheelsWheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed...9.8 Critical
- n8n-io n8nn8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field7.0 High
- cemtan sar2htmlcemtan sar2html Archive Processing sar2html.py updateDb sql injection6.9 Medium
- labredescefetrj wegiaWeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php9.8 Critical
- labredescefetrj wegiaWeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter8.8 High
- labredescefetrj wegiaWeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection6.5 Medium
- labredescefetrj wegiaWeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter9.8 Critical
- labredescefetrj wegiaWeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php9.8 Critical
- cemtan sar2htmlcemtan sar2html sar2html.py index sql injection6.9 Medium
- invoiceshelfInvoiceShelf ORDER BY SQL injection through orderByField7.1 High
- dataeaseDataEase: Stored SQL Injection in group-field binning bounds8.7 High
- Show moreLoading…