CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of t
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown func
A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of t
A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /
A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown proce
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the fil
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the
A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file
A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Mana
A vulnerability was found in code-projects Automated Voting System 1.0. Affected by this vulnerability is an unknown fun
A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findFie
A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cm
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/mo
A weakness has been identified in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The impacted element is the functi
A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This affects the funct
A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. This impacts the function Query of t
A flaw has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected is the function Query of the file
The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access to functionality provid
A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown fun
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown func
A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionali
A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of th
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/ac
A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the
A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects s
A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unkno
A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected el
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unkn
A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function
A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /
A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown funct
A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatew
A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is s
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function o
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown functi
A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown function of the f
A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the fi
A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file
A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The im
A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function o
A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the
A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /
A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can l
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started