Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,188
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798783 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 4,188

Image ID Title
CVE-2026-14754 Vulnerability in code-projects Hotel and Tourism Reservation (CVE-2026-14754)
CVE-2026-14751 Vulnerability in mjperpinosa stumasy (CVE-2026-14751)
CVE-2026-14750 Vulnerability in mjperpinosa stumasy (CVE-2026-14750)
CVE-2026-14747 Vulnerability in code-projects Real State Services (CVE-2026-14747)
CVE-2026-14743 Vulnerability in code-projects Real State Services (CVE-2026-14743)
CVE-2026-14744 Vulnerability in code-projects Real State Services (CVE-2026-14744)
CVE-2026-14746 Vulnerability in code-projects Real State Services (CVE-2026-14746)
CVE-2026-14745 Vulnerability in code-projects Real State Services (CVE-2026-14745)
CVE-2026-14737 Vulnerability in Hanwang e-Face General Management Platform (CVE-2026-14737)
CVE-2026-14735 Vulnerability in code-projects Smart Parking System (CVE-2026-14735)
CVE-2026-14734 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14734)
CVE-2026-14730 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14730)
CVE-2026-14731 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14731)
CVE-2026-14732 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14732)
CVE-2026-14733 Vulnerability in SourceCodester Class and Exam Timetabling System (CVE-2026-14733)
CVE-2026-14717 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14717)
CVE-2026-14703 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14703)
CVE-2026-14705 Vulnerability in code-projects Online Examination (CVE-2026-14705)
CVE-2026-14706 Vulnerability in code-projects Online Examination (CVE-2026-14706)
CVE-2026-14713 Vulnerability in SourceCodester Pizzafy E-Commerce System (CVE-2026-14713)
CVE-2026-14700 Vulnerability in code-projects Internship Management System (CVE-2026-14700)
CVE-2026-14701 Vulnerability in code-projects Internship Management System (CVE-2026-14701)
CVE-2026-14692 Vulnerability in SourceCodester Multi-Vendor Online Grocery Management System (CVE-2026-14692)
CVE-2026-14689 Vulnerability in CodeAstro Apartment Visitor Management System (CVE-2026-14689)
CVE-2026-14688 Vulnerability in itsourcecode Online Hotel Management System (CVE-2026-14688)
CVE-2026-14695 Vulnerability in SourceCodester Multi-Vendor Online Grocery Management System (CVE-2026-14695)
CVE-2026-14694 Vulnerability in SourceCodester Multi-Vendor Online Grocery Management System (CVE-2026-14694)
CVE-2026-14658 Vulnerability in code-projects Assessment Management (CVE-2026-14658)
CVE-2026-14660 Vulnerability in code-projects Online Job Portal (CVE-2026-14660)
CVE-2026-14659 Vulnerability in itsourcecode Hospital Management System (CVE-2026-14659)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details