Sign in Sign up
JA · EN · FR
SecPulse

Cwe 89

🧬 CWE Related 4,152
slug: cwe-89

Explanation

CWE-89は「Webアプリがユーザー入力をきちんとパラメータ化せずにSQL文に埋め込んでしまう欠陥」のことです。 攻撃者はSQL文の構造を書き換えてデータベースを直接操作でき、全ユーザーのID/パスワードを抜く・データ改ざん・データベース全削除など何でもされます。 対策は「プリペアドステートメント (パラメータ化クエリ)」を必ず使うこと。
📌 Example
Equifax事件 (2017): 米国最大の信用情報機関で1.4億人の個人情報流出。直接的にはApache Strutsの脆弱性だったが、SQLi脆弱性を経由した類似事件は無数にある。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 4,154

Image ID Title
CVE-2026-105178 Vulnerability in SourceCodester Drug Recommendation System (CVE-2026-105178)
CVE-2026-105176 Vulnerability in SourceCodester Drug Recommendation System (CVE-2026-105176)
CVE-2026-105175 Vulnerability in SourceCodester Drug Recommendation System (CVE-2026-105175)
CVE-2026-105172 Vulnerability in itsourcecode Online Admission System (CVE-2026-105172)
CVE-2026-105168 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105168)
CVE-2026-105169 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105169)
CVE-2026-105167 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105167)
CVE-2026-105166 Vulnerability in kishor-23 food-waste-management-system (CVE-2026-105166)
CVE-2026-105158 Vulnerability in RainyGao DocSys (CVE-2026-105158)
CVE-2026-105149 Vulnerability in mooSocial (CVE-2026-105149)
CVE-2026-105146 Vulnerability in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910 (CVE-2026-105146)
CVE-2026-103355 SQL Injection in Unlimited Elements For Elementor (CVE-2026-103355)
CVE-2026-20247 SQL Injection in Cisco ISE (CVE-2026-20247)
CVE-2026-76448 SQL Injection in Cisco Identity Services Engine (CVE-2026-76448)
CVE-2026-20235 SQL Injection in Cisco Identity Services Engine (CVE-2026-20235)
CVE-2026-96267 SQL Injection in WP Visitor Statistics (WordPress plugin) (CVE-2026-96267)
CVE-2026-18443 SQL Injection in WordPress (CVE-2026-18443)
CVE-2026-92923 SQL Injection in Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-92923)
CVE-2026-89236 SQL Injection in SaveTo Wishlist Lite (WordPress plugin) (CVE-2026-89236)
CVE-2026-85568 SQL Injection in Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-85568)
CVE-2026-103913 SQL Injection in GeoDirectory (WordPress plugin) (CVE-2026-103913)
CVE-2026-95865 SQL Injection in WordPress (CVE-2026-95865)
CVE-2026-94539 SQL Injection in WordPress (CVE-2026-94539)
CVE-2026-82045 SQL Injection in UTMStack (CVE-2026-82045)
CVE-2026-82039 SQL Injection in UTMStack (CVE-2026-82039)
CVE-2026-104625 Vulnerability in CodeAstro Simple Loan Management System (CVE-2026-104625)
CVE-2026-85215 SQL Injection in Paperwork (CVE-2026-85215)
CVE-2026-104614 Vulnerability in CodeAstro Simple Pharmacy Management System (CVE-2026-104614)
CVE-2026-104613 Vulnerability in CodeAstro Simple Pharmacy Management System (CVE-2026-104613)
CVE-2026-104609 Vulnerability in onetwothreeneth HospitalManagementSystem (CVE-2026-104609)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details