CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipul
A flaw has been found in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipul
A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability
A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modu
A flaw has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/d
A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/adm
A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of
A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /a
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown
A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknow
A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown
A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /r
A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknow
A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some
A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /for
A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file
A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is a
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown fun
A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of t
A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the f
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affec
A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an
A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an
A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknow
A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown functio
A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an
A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is so
A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknow
A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown functi
A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown
A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue i
A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of th
A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unk
A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown function
A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the fi
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected
A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of
A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file
A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown functi
A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknow
A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unkno
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unk
SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote atta
A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function
A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerabil
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unkno
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown func
A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an u
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started