VYPR

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

BaseStableLikelihood: High

Description

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Hierarchy (View 1000)

Parents

Children

Related attack patterns (CAPEC)

CAPEC-108 · CAPEC-109 · CAPEC-110 · CAPEC-470 · CAPEC-66 · CAPEC-7

CVEs mapped to this weakness (12,807)

page 343 of 641
  • CVE-2018-2447MedAug 14, 2018
    risk 0.42cvss 6.5epss 0.01

    SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.

  • CVE-2018-1000558MedJun 26, 2018
    risk 0.42cvss 6.5epss 0.01

    OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access to data stored within database. This attack appear to be exploitable via By…

  • CVE-2016-10556HigMay 29, 2018
    risk 0.42cvss 7.5epss 0.01

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as strings and…

  • CVE-2018-10353MedMay 23, 2018
    risk 0.42cvss 6.5epss 0.01

    A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this…

  • CVE-2018-9102MedApr 25, 2018
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient…

  • CVE-2018-1096MedApr 5, 2018
    risk 0.42cvss 6.5epss 0.01

    An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

  • CVE-2017-16893MedDec 1, 2017
    risk 0.42cvss 6.5epss 0.01

    The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database.…

  • CVE-2017-12364MedNov 30, 2017
    risk 0.42cvss 6.5epss 0.01

    A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language (SQL) queries. The vulnerability is due to a failure to validate user-supplied input that is used…

  • CVE-2017-16961MedNov 27, 2017
    risk 0.42cvss 6.5epss 0.01

    A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The attack uses an admin/trees/add/process…

  • CVE-2017-6754MedAug 7, 2017
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the…

  • CVE-2017-9463MedJun 14, 2017
    risk 0.42cvss 6.5epss 0.02

    The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The…

  • CVE-2017-3899MedMar 14, 2017
    risk 0.42cvss 6.5epss 0.02

    SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter.

  • CVE-2016-2950MedNov 30, 2016
    risk 0.42cvss 6.5epss 0.01

    SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2016-8564MedOct 13, 2016
    risk 0.42cvss 6.5epss 0.01

    SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.

  • CVE-2016-5653MedJul 19, 2016
    risk 0.42cvss 6.5epss 0.01

    Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.

  • CVE-2016-4507MedJul 6, 2016
    risk 0.42cvss 6.4epss 0.01

    SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2016-1437MedJun 23, 2016
    risk 0.42cvss 6.5epss 0.01

    SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549.

  • CVE-2016-1308MedFeb 7, 2016
    risk 0.42cvss 6.5epss 0.01

    SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227.

  • CVE-2015-6433MedJan 8, 2016
    risk 0.42cvss 6.5epss 0.01

    SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767.

  • CVE-2015-6004MedDec 27, 2015
    risk 0.42cvss 6.5epss 0.02

    Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter.