security vulnerability_error ai_generated true

SQL injection detected in user input

ID: security/sql-injection-detected

Also available as: JSON · Markdown
88%Fix Rate
90%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —

Root Cause

User input directly interpolated into SQL query.

generic

Workarounds

  1. 95% success Use parameterized queries/prepared statements exclusively
  2. 92% success Use ORM methods that parameterize automatically

Dead Ends

Common approaches that don't work:

  1. Escape single quotes only 82% fail

    Bypassed with encoding or numeric injection

  2. Use blocklist of SQL keywords 80% fail

    Easily evaded with case variations and encoding