CWE-89
21,559 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CVEs (21,559)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Sales Representative SQL Injection in Groundhogg <= 4.5 versions. |
Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. |
Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. |
Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. |
Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. |
Contributor SQL Injection in WP Post Author <= 3.9.1 versions. |
Contributor SQL Injection in Gallery <= 4.7.8 versions. |
Contributor SQL Injection in wpForo Forum <= 3.0.9 versions. |
Administrator SQL Injection in Popup box <= 6.0.1 versions. |
Administrator SQL Injection in WP All Import <= 4.0.1 versions. |
Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions. |
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. |
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. |
Subscriber SQL Injection in Tourfic <= 2.22.5 versions. |
Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions. |
Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions. |
Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions. |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions. |
Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. |
Unauthenticated SQL Injection in wpDataTables <= 7.4 versions. |