Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,154
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 4,179

Image ID Title
CVE-2026-12936 SQL Injection in Recurio – Ultimate Subscription for WooCommerce (WordPress plugin) (CVE-2026-12936)
CVE-2026-9700 SQL Injection in Eventer (WordPress plugin) (CVE-2026-9700)
CVE-2026-53572 Vulnerability in github.com/kedacore/keda/v2 (CVE-2026-53572)
CVE-2026-55635 SQL Injection in DataEase (CVE-2026-55635)
CVE-2026-21892 SQL Injection in parsl (CVE-2026-21892)
CVE-2025-67644 SQL Injection in langgraph-checkpoint-sqlite (CVE-2025-67644)
CVE-2025-64104 SQL Injection in langgraph-checkpoint-sqlite (CVE-2025-64104)
CVE-2026-14471 SQL Injection in Amazon (CVE-2026-14471)
CVE-2026-33734 SQL Injection in FOSSBilling (CVE-2026-33734)
CVE-2026-54760 Path Traversal in langroid (CVE-2026-54760)
CVE-2026-14809 Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing...
CVE-2026-14795 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14795)
CVE-2026-14798 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14798)
CVE-2026-14797 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14797)
CVE-2026-14799 Vulnerability in CodeAstro Ecommerce Website (CVE-2026-14799)
CVE-2026-14796 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14796)
CVE-2026-14774 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14774)
CVE-2026-14773 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14773)
CVE-2026-14772 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14772)
CVE-2026-14771 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14771)
CVE-2026-14770 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14770)
CVE-2026-14769 Vulnerability in code-projects Real State Services (CVE-2026-14769)
CVE-2026-14767 Vulnerability in CodeAstro Ecommerce Website (CVE-2026-14767)
CVE-2026-14768 Vulnerability in code-projects Real State Services (CVE-2026-14768)
CVE-2026-14766 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14766)
CVE-2026-14763 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14763)
CVE-2026-14764 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14764)
CVE-2026-14762 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14762)
CVE-2026-14755 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14755)
CVE-2026-14756 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14756)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details