CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown func
A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/control
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 2
A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /d
A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the
A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /
A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability i
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function
A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality o
A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/v
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delet
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function dele
A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processi
A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /
A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknow
A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_
A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php.
A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the
A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /a
A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomde
A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /datab
A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the fi
A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functional
A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /ad
A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the fil
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown func
A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file
A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file
A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3.
A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file
A vulnerability was found in JIZHICMS up to 2.5.5. Impacted is the function commentlist of the file /index.php/admins/Co
A vulnerability was determined in JIZHICMS up to 2.5.5. The affected element is the function deleteAll/findAll/delete of
A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0. This affects an unknown part of the fi
A vulnerability was found in ketr JEPaaS up to 7.2.8. This impacts the function readAllPostil of the file /je/postil/pos
A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown functi
A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of
A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f
A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi
A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the
A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file applic
A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php.
A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /app
A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of
A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317. This vulnerabi
PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabili
Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions
There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started