Cwe 89

🧬 CWE Liées 4,152

slug: cwe-89

Explication

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。

📌 Exemple

Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。

🔗 Liens utiles

🔖 Étiquettes liées

Cwe 798678 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnérabilités associées 4,154

ID	Titre	Gravité	Détecté
CVE-2026-103066	Injection SQL dans WP BASE Booking (CVE-2026-103066)	High	il y a 1 semaine
CVE-2026-88424	Injection SQL dans FineAdmin (CVE-2026-88424)	Critical	il y a 1 semaine
CVE-2026-105387	Vulnérabilité dans girishsaraf Online-Appointment-Booking-System (CVE-2026-105387)	High	il y a 1 semaine
CVE-2026-105386	Vulnérabilité dans onetwothreeneth HospitalManagementSystem (CVE-2026-105386)	High	il y a 1 semaine
CVE-2026-103352	Injection SQL dans WP BASE Booking (CVE-2026-103352)	Critical	il y a 1 semaine
CVE-2026-105385	Vulnérabilité dans onetwothreeneth HospitalManagementSystem (CVE-2026-105385)	High	il y a 1 semaine
CVE-2026-105384	Vulnérabilité dans UNION HospitalManagementSystem (CVE-2026-105384)	High	il y a 1 semaine
CVE-2026-105383	Vulnérabilité dans onetwothreeneth HospitalManagementSystem (CVE-2026-105383)	High	il y a 1 semaine
CVE-2026-88397	ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin...	Medium	il y a 1 semaine
CVE-2026-88395	Injection SQL dans GouGuOA (CVE-2026-88395)	Critical	il y a 1 semaine
CVE-2026-102428	Injection SQL dans Ordasoft (CVE-2026-102428)	Critical	il y a 1 semaine
CVE-2026-105287	A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the...	Medium	il y a 1 semaine
CVE-2026-105254	A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an...	Medium	il y a 1 semaine
CVE-2026-105253	A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue...	High	il y a 1 semaine
CVE-2026-104408	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	il y a 1 semaine
CVE-2026-104389	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	il y a 1 semaine
CVE-2026-105247	A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The...	High	il y a 1 semaine
CVE-2026-105246	A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an...	High	il y a 1 semaine
CVE-2026-105229	A weakness has been identified in kishor-23 food-waste-management-system...	High	il y a 1 semaine
CVE-2026-105232	A flaw has been found in kishor-23 food-waste-management-system...	High	il y a 1 semaine
CVE-2026-105231	A vulnerability was detected in kishor-23 food-waste-management-system...	High	il y a 1 semaine
CVE-2026-105230	A security vulnerability has been detected in kishor-23 food-waste-management-system...	High	il y a 1 semaine
CVE-2026-105187	A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an...	Medium	il y a 1 semaine
CVE-2026-105186	A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown...	Medium	il y a 1 semaine
CVE-2026-105185	A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown...	High	il y a 1 semaine
CVE-2026-105182	A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0....	High	il y a 1 semaine
CVE-2026-105183	A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element...	High	il y a 1 semaine
CVE-2026-105181	A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects...	Medium	il y a 1 semaine
CVE-2026-105184	A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The...	High	il y a 1 semaine
CVE-2026-105177	A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected...	Medium	il y a 1 semaine