Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,154
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 4,168

Image ID Title
CVE-2025-11088 Vulnerability in itsourcecode Open Source Job Portal (CVE-2025-11088)
CVE-2025-11076 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11076)
CVE-2025-11077 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11077)
CVE-2025-11075 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11075)
CVE-2025-11074 Vulnerability in code-projects Project Monitoring System (CVE-2025-11074)
CVE-2025-11070 Vulnerability in Projectworlds Online Shopping System (CVE-2025-11070)
CVE-2025-11066 Vulnerability in code-projects Online Bidding System (CVE-2025-11066)
CVE-2025-11063 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11063)
CVE-2025-11064 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11064)
CVE-2025-11062 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11062)
CVE-2025-11061 Vulnerability in Campcodes Online Learning Management System (CVE-2025-11061)
CVE-2025-11057 Vulnerability in SourceCodester Pet Grooming Management Software (CVE-2025-11057)
CVE-2025-11056 Vulnerability in ProjectsAndPrograms School Management System (CVE-2025-11056)
CVE-2025-11055 Vulnerability in SourceCodester Online Hotel Reservation System (CVE-2025-11055)
CVE-2025-11054 Vulnerability in itsourcecode Open Source Job Portal (CVE-2025-11054)
CVE-2025-11053 Vulnerability in PHPGurukul Small CRM (CVE-2025-11053)
CVE-2025-11052 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-11052)
CVE-2025-59939 SQL Injection in WeGIA (CVE-2025-59939)
CVE-2025-11041 Vulnerability in itsourcecode Open Source Job Portal (CVE-2025-11041)
CVE-2025-11038 Vulnerability in itsourcecode Online Clinic Management System (CVE-2025-11038)
CVE-2025-11039 Vulnerability in Campcodes Computer Sales and Inventory System (CVE-2025-11039)
CVE-2025-11040 Vulnerability in code-projects Hostel Management System (CVE-2025-11040)
CVE-2025-11037 Vulnerability in code-projects E-Commerce Website (CVE-2025-11037)
CVE-2025-11036 Vulnerability in code-projects E-Commerce Website (CVE-2025-11036)
CVE-2025-11032 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-11032)
CVE-2025-11033 Vulnerability in kidaze CourseSelectionSystem (CVE-2025-11033)
CVE-2025-60118 SQL Injection in PGS Core (CVE-2025-60118)
CVE-2025-60109 SQL Injection in LambertGroup - AllInOne - Content Slider (CVE-2025-60109)
CVE-2025-60110 SQL Injection in AllInOne - Banner Rotator (CVE-2025-60110)
CVE-2025-60107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details