Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,154
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 4,173

Image ID Title
CVE-2026-79322 SQL Injection in Mageplaza (CVE-2026-79322)
CVE-2026-79947 SQL Injection in Dell SCG (CVE-2026-79947)
CVE-2026-67401 A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root...
CVE-2026-78482 SQL Injection in Dell SCG (CVE-2026-78482)
CVE-2026-87807 SQL Injection in siyuan (CVE-2026-87807)
CVE-2026-79972 SQL Injection in Dell SCG (CVE-2026-79972)
CVE-2026-79640 SQL Injection in Dell SCG (CVE-2026-79640)
CVE-2026-80177 SQL Injection in Dell SCG (CVE-2026-80177)
CVE-2026-19778 SQL Injection in WordPress (CVE-2026-19778)
CVE-2026-84113 SQL Injection in Quentn WP (WordPress plugin) (CVE-2026-84113)
CVE-2026-84068 SQL Injection in Quentn WP (WordPress plugin) (CVE-2026-84068)
CVE-2026-14962 SQL Injection in ELEX WooCommerce Request a Quote (WordPress plugin) (CVE-2026-14962)
CVE-2026-19944 SQL Injection in WP Crowdfunding (WordPress plugin) (CVE-2026-19944)
CVE-2026-19800 SQL Injection in WordPress (CVE-2026-19800)
CVE-2026-87034 SQL Injection in Comply (CVE-2026-87034)
CVE-2026-78623 SQL Injection in Okta Access Gateway (CVE-2026-78623)
CVE-2026-75746 SQL Injection in Adobe Coldfusion (CVE-2026-75746)
CVE-2026-86675 Vulnerability in itsourcecode Sales and Inventory System (CVE-2026-86675)
CVE-2026-69716 SQL Injection in Microsoft Sharepoint Server (CVE-2026-69716)
CVE-2026-69636 SQL Injection in Microsoft Sharepoint Server (CVE-2026-69636)
CVE-2026-66819 SQL Injection in SQL Server (CVE-2026-66819)
CVE-2026-66820 SQL Injection in SQL Server (CVE-2026-66820)
CVE-2026-67370 SQL Injection in SQL Server (CVE-2026-67370)
CVE-2026-62895 SQL Injection in Azure Arc (CVE-2026-62895)
CVE-2026-86667 Vulnerability in aircheng-org iWebShop-5 (CVE-2026-86667)
CVE-2026-79570 SQL Injection in mfish-nocode-pro (CVE-2026-79570)
CVE-2026-79569 SQL Injection in Movie_Recommend (CVE-2026-79569)
CVE-2026-79573 SQL Injection in L-ONE (CVE-2026-79573)
CVE-2026-78837 SQL Injection in AppNitro MachForm (CVE-2026-78837)
CVE-2026-77098 SQL Injection in Commvault (CVE-2026-77098)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details