VYPR

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Hierarchy (View 1000)

Parents

Children

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-109 · CAPEC-110 · CAPEC-470 · CAPEC-66 · CAPEC-7

CVEs mapped to this weakness (20,812)

page 24 of 1,041
  • CVE-2017-9834CriSep 7, 2017
    risk 0.67cvss 9.8epss 0.04

    SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php.

  • CVE-2014-9558CriAug 28, 2017
    risk 0.67cvss 9.8epss 0.04

    Multiple SQL injection vulnerabilities in SmartCMS v.2.

  • CVE-2017-11385CriAug 2, 2017
    risk 0.67cvss 9.8epss 0.38

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545.

  • CVE-2017-11384CriAug 2, 2017
    risk 0.67cvss 9.8epss 0.38

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.

  • CVE-2017-11383CriAug 2, 2017
    risk 0.67cvss 9.8epss 0.38

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560.

  • CVE-2017-11494CriAug 2, 2017
    risk 0.67cvss 9.8epss 0.04

    SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.

  • CVE-2015-2798CriJul 25, 2017
    risk 0.67cvss 9.8epss 0.03

    SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2017-11471CriJul 20, 2017
    risk 0.67cvss 9.8epss 0.01

    IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.

  • CVE-2017-11470CriJul 20, 2017
    risk 0.67cvss 9.8epss 0.01

    IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.

  • CVE-2017-10682CriJun 29, 2017
    risk 0.67cvss 9.8epss 0.08

    SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php.

  • CVE-2017-9730CriJun 19, 2017
    risk 0.67cvss 9.8epss 0.02

    SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter.

  • CVE-2015-7346CriJun 7, 2017
    risk 0.67cvss 9.8epss 0.04

    SQL injection vulnerability in ZCMS 1.1.

  • CVE-2016-4337CriApr 12, 2017
    risk 0.67cvss 9.8epss 0.02

    SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.

  • CVE-2017-6550CriMar 20, 2017
    risk 0.67cvss 9.8epss 0.04

    Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.

  • CVE-2017-6095CriFeb 21, 2017
    risk 0.67cvss 9.8epss 0.06

    A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php (Unauthenticated) with the GET Parameter: list_id.

  • CVE-2017-5344CriFeb 17, 2017
    risk 0.67cvss 9.8epss 0.06

    An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query execution. SQL quote escaping and a keyword blacklist were implemented in a new…

  • CVE-2016-3694CriFeb 15, 2017
    risk 0.67cvss 9.8epss 0.04

    Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the (1) orders_status or (2) customers_status parameter to…

  • CVE-2016-7400CriFeb 7, 2017
    risk 0.67cvss 9.8epss 0.05

    Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id…

  • CVE-2016-1000125CriOct 6, 2016
    risk 0.67cvss 9.8epss 0.03

    Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

  • CVE-2016-1000124CriOct 6, 2016
    risk 0.67cvss 9.8epss 0.03

    Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6