Sign in Sign up
JA · EN · FR
SecPulse

SQL Injection

⚔️ Attack Types Related 3,881
slug: sqli

Explanation

SQLインジェクションは「Webフォームに特殊な文字列を入れて、データベースに不正な命令を実行させる」古典的な攻撃です。 たとえばログイン画面で `' OR '1'='1` と入力するだけでパスワードチェックを回避できる、というのが最も有名な例です。 対策は「プリペアドステートメント」を使うことで、初学者向けの教科書にも載っている基本中の基本ですが、いまだに世界中で被害が続いています。
📌 Example
2017年Equifax事件 (1.4億人の個人情報流出)、2011年Sony PSN事件 (7700万アカウント漏洩)。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 Remote Code Execution2906 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 3,881

Image ID Title
CVE-2017-9429 SQL Injection in Event List plugin 0.7.8 for WordPress (CVE-2017-9429)
CVE-2017-9603 SQL Injection in WordPress WP Jobs plugin (CVE-2017-9603)
CVE-2017-6668 SQL Injection in Cisco Unified Communications Domain Manager (CVE-2017-6668)
CVE-2017-4972 SQL Injection in Cloud Foundry Foundation cf-release (CVE-2017-4972)
CVE-2017-4974 SQL Injection in Cloud Foundry Foundation cf-release (CVE-2017-4974)
CVE-2017-9418 SQL Injection in WP-Testimonials plugin 3.4.1 for WordPress (CVE-2017-9418)
CVE-2017-2195 SQL Injection in Multi Feed Reader (CVE-2017-2195)
CVE-2016-7803 SQL Injection in Cybozu Garoon 3.0.0 to (CVE-2016-7803)
CVE-2016-2034 SQL Injection in ClearPass Policy Manager (CVE-2016-2034)
CVE-2015-7346 SQL Injection in ZCMS (CVE-2015-7346)
CVE-2017-9449 SQL Injection in BigTree CMS (CVE-2017-9449)
CVE-2017-9443 SQL Injection in BigTree CMS (CVE-2017-9443)
CVE-2017-8835 SQL Injection in Peplink (CVE-2017-8835)
CVE-2017-9435 SQL Injection in Dolibarr ERP/CRM (CVE-2017-9435)
CVE-2017-9436 SQL Injection in TeamPass (CVE-2017-9436)
CVE-2017-9437 SQL Injection in Openbravo Business Suite (CVE-2017-9437)
CVE-2017-9427 SQL Injection in BigTree CMS (CVE-2017-9427)
CVE-2017-9360 SQL Injection in WebsiteBaker (CVE-2017-9360)
CVE-2016-10378 SQL Injection in e107 (CVE-2016-10378)
CVE-2016-10379 SQL Injection in Virtuemart (CVE-2016-10379)
CVE-2017-7236 SQL Injection in NetApp OnCommand Unified Manager Core Package (CVE-2017-7236)
CVE-2016-4905 SQL Injection in WP-OliveCart (CVE-2016-4905)
CVE-2017-6195 SQL Injection in Ipswitch (CVE-2017-6195)
CVE-2017-8917 SQL Injection in Joomla (CVE-2017-8917)
CVE-2017-7952 SQL Injection in INFOR EAM (CVE-2017-7952)
CVE-2017-7886 SQL Injection in Dolibarr ERP/CRM (CVE-2017-7886)
CVE-2017-5527 SQL Injection in TIBCO Spotfire Server (CVE-2017-5527)
CVE-2017-8789 SQL Injection in Accellion File Transfer Appliance (CVE-2017-8789)
CVE-2017-8796 SQL Injection in Accellion File Transfer Appliance (CVE-2017-8796)
CVE-2017-6557 SQL Injection in ArrayOS (CVE-2017-6557)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details