201
CAPEC-ID Attack Pattern Name
88 OS Command Injection
137 Parameter Injection
174 Flash Parameter Injection
460 HTTP Parameter Pollution (HPP)
References
[REF-859]Steven Christey. "Argument injection issues". < https://seclists.org/bugtraq/2007/
Feb/234ed >.2023-04-07.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-1030]Eldar Marcussen. "Security issues with using PHP's escapeshellarg". 2013 November
3. < https://baesystemsai.blogspot.com/2013/11/security-issues-with-using-phps.html >.
[REF-1249]Dawid Golunski. "PHPMailer < 5.2.18 Remote Code Execution [CVE-2016-10033]".
2016 December 5. < https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-
CVE-2016-10033-Vuln.html >.
[REF-1250]Dawid Golunski. "Pwning PHP mail() function For Fun And RCE". 2017 May 3. < https://
exploitbox.io/paper/Pwning-PHP-Mail-Function-For-Fun-And-RCE.html >.
CWE-89: Improper Neutralization of Special Elements used in an SQL
Command ('SQL Injection')
Weakness ID : 89
Structure : Simple
Abstraction : Base
Description
The product constructs all or part of an SQL command using externally-influenced input from an
upstream component, but it does not neutralize or incorrectly neutralizes special elements that
could modify the intended SQL command when it is sent to a downstream component.
Extended Description
Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL
query can cause those inputs to be interpreted as SQL instead of ordinary user data. This can be
used to alter query logic to bypass security checks, or to insert additional statements that modify
the back-end database, possibly including execution of system commands.
SQL injection has become a common issue with database-driven web sites. The flaw is easily
detected, and easily exploited, and as such, any site or product package with even a minimal user
base is likely to be subject to an attempted attack of this kind. This flaw depends on the fact that
SQL makes no real distinction between the control and data planes.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 943 Improper Neutralization of Special Elements in Data Query
Logic