CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an u
A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affe
A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vu
A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue a
A vulnerability was found in Taokeyun up to 1.0.5. It has been rated as critical. Affected by this issue is the function
A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the fi
A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index
A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0.
A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affe
A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affecte
A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by
A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. Thi
A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This
A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Affected by this vulnerability is an
A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Affected by this is
A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown
A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. This vulnerability affects
A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical. This issue affects some unknown
A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is a
A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by
A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is th
A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affect
A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects
A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affecte
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This aff
A vulnerability was found in Smsot up to 2.12. It has been classified as critical. Affected is an unknown function of th
A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an un
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critic
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected
A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unkn
A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknow
A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this iss
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by
A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affect
A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as c
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vu
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by t
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affe
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affect
A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulner
A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknow
A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This
A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown proce
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects a
A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started