Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,154
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 4,179

Image ID Title
CVE-2026-15183 SQL Injection in Snowflake Spark Connector (CVE-2026-15183)
CVE-2026-15672 Vulnerability in itsourcecode Electronic Judging System (CVE-2026-15672)
CVE-2026-15676 Vulnerability in code-projects Online Job Portal (CVE-2026-15676)
CVE-2026-15675 Vulnerability in code-projects Online Job Portal (CVE-2026-15675)
CVE-2026-44769 SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to...
CVE-2026-51821 SQL Injection in Shenzhou Shihan Video Conference System (CVE-2026-51821)
CVE-2026-15597 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-15597)
CVE-2026-61667 SQL Injection in DIRAC (CVE-2026-61667)
CVE-2026-45376 SQL Injection in decidim-admin (CVE-2026-45376)
CVE-2026-15559 Vulnerability in CodeAstro Simple Online Leave Management System (CVE-2026-15559)
CVE-2026-15558 Vulnerability in CodeAstro Simple Online Leave Management System (CVE-2026-15558)
CVE-2026-61955 SQL Injection in گرویتی فرم فارسی (CVE-2026-61955)
CVE-2026-59515 SQL Injection in AIWU (CVE-2026-59515)
CVE-2026-57810 SQL Injection in APIExperts Square for WooCommerce (CVE-2026-57810)
CVE-2026-57787 SQL Injection in CWS SVGicons (CVE-2026-57787)
CVE-2026-57771 SQL Injection in GD Rating System (CVE-2026-57771)
CVE-2026-57773 SQL Injection in Advanced Shipment Tracking for WooCommerce (CVE-2026-57773)
CVE-2026-57772 SQL Injection in WP Inventory Manager (CVE-2026-57772)
CVE-2026-57739 SQL Injection in AcyMailing SMTP Newsletter (CVE-2026-57739)
CVE-2026-57726 SQL Injection in Kirki (CVE-2026-57726)
CVE-2026-57714 SQL Injection in LatePoint (CVE-2026-57714)
CVE-2026-57707 SQL Injection in Simple Business Directory Pro (CVE-2026-57707)
CVE-2026-57702 SQL Injection in Amelia (CVE-2026-57702)
CVE-2026-57385 SQL Injection in Vitepos (CVE-2026-57385)
CVE-2026-15536 Vulnerability in itsourcecode Hospital Management System (CVE-2026-15536)
CVE-2026-15537 Vulnerability in SourceCodester Online Book Store System (CVE-2026-15537)
CVE-2026-15523 Vulnerability in CodeAstro Simple Online Leave Management System (CVE-2026-15523)
CVE-2026-15517 Vulnerability in Jinher OA (CVE-2026-15517)
CVE-2026-15514 Vulnerability in Metasoft 美特软件 MetaCRM (CVE-2026-15514)
CVE-2026-15502 Vulnerability in AojiaoZero Antaris (CVE-2026-15502)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details