CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (admi
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affe
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (admi
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (admi
The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statemen
A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulner
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected
A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/i
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling Syst
A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.
A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue
The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statem
A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. A
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vuln
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the fi
A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. Th
A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo
A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functio
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.
A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1
A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code o
A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0. This issue affects some
A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0. Affected is an unknown functi
A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this vulnerability i
A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this issue is some unknow
A vulnerability classified as critical was found in Webkul QloApps 1.6.1. Affected by this vulnerability is an unknown f
A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue
A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This
A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerabil
A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects s
A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects so
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by th
A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affect
A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This
A vulnerability was found in PHPGurukul Car Washing Management System 1.0. It has been rated as critical. Affected by th
A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknow
A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/control
A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_memb
A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_c
A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the
A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function o
A flaw has been found in jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64. This a
A weakness has been identified in Campcodes Online Beauty Parlor Management System 1.0. The affected element is an unkno
A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started