CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects u
A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging Sy
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulne
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. Affected by this issue is
A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been clas
A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This af
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue a
A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Th
A vulnerability classified as critical was found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This vu
A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critic
A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this is
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unk
A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This is
A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this iss
Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulner
A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critica
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affecte
A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this i
A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1
SQL injection vulnerability in the module "Products Alert" (productsalert) before 1.7.4 from Smart Modules for PrestaSho
A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical.
A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation Sy
A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unk
A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability af
A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the fun
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affec
A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected b
A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnera
A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown pr
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. A
A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerabil
A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. Thi
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This
A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue af
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affe
A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critica
A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. This issue affec
A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnera
A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected i
A vulnerability was found in ForIP Tecnologia Administração PABX 1.x. It has been rated as critical. Affected by this is
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected i
A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an un
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started