VYPR

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Hierarchy (View 1000)

Parents

Children

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-109 · CAPEC-110 · CAPEC-470 · CAPEC-66 · CAPEC-7

CVEs mapped to this weakness (20,855)

page 179 of 1,043
  • CVE-2017-17892CriDec 27, 2017
    Readymade Video Sharing Script Project
    Readymade Video Sharing Script
    risk 0.64cvss 9.8epss 0.01

    Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.

  • CVE-2017-17779CriDec 20, 2017
    Paid To Read Script Project
    Paid To Read Script
    risk 0.64cvss 9.8epss 0.01

    Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.

  • CVE-2017-15875CriDec 19, 2017
    GPWeb
    GPWeb
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.

  • CVE-2017-17730CriDec 18, 2017
    Dedecms
    Dedecms
    risk 0.64cvss 9.8epss 0.01

    DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.

  • CVE-2017-17713CriDec 16, 2017
    boxug
    trape
    risk 0.64cvss 9.8epss 0.02

    Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat…

  • CVE-2017-10899CriDec 1, 2017
    A Reserve
    A-Reserve
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2017-10898CriDec 1, 2017
    A Member For MT Cloud
    A-Member
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in the A-Member and A-Member for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2017-16896CriNov 20, 2017
    Tiny Tiny RSS
    forgotpass
    risk 0.64cvss 9.8epss 0.01

    A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.

  • CVE-2017-16561CriNov 7, 2017
    Ingenious School Management System Project
    Ingenious School Management System
    risk 0.64cvss 9.8epss 0.01

    /view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.

  • CVE-2017-14356CriOct 31, 2017
    Microfocus
    ArcSight ESM Express
    risk 0.64cvss 9.8epss 0.02

    An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.

  • CVE-2017-15946CriOct 28, 2017
    Joomla
    com_tag
    risk 0.64cvss 9.8epss 0.01

    In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.

  • CVE-2017-15919CriOct 26, 2017
    WordPress
    ultimate-form-builder-lite
    risk 0.64cvss 9.8epss 0.02

    The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.

  • CVE-2017-15907CriOct 26, 2017
    PHP Collab
    Phpcollab
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.

  • CVE-2012-4570CriOct 23, 2017
    Letodms Project
    Letodms
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2017-15381CriOct 23, 2017
    E Sic
    E-Sic
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search script).

  • CVE-2017-15379CriOct 23, 2017
    E Sic
    E-Sic
    risk 0.64cvss 9.8epss 0.03

    An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.

  • CVE-2015-5376CriOct 18, 2017
    Gsi
    WiNPAT Portal
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field.

  • CVE-2017-15539CriOct 17, 2017
    Zorovavi\/blog Project
    Zorovavi\/blog
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.

  • CVE-2014-8621CriOct 16, 2017
    WordPress
    Store Locator
    risk 0.64cvss 9.8epss 0.03

    SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

  • CVE-2017-15373CriOct 16, 2017
    E Sic
    E-Sic
    risk 0.64cvss 9.8epss 0.02

    E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).