CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by i
WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri
Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu
DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attac
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by inject
NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthent
Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate
Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL
BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queri
Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit
Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthen
Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queri
Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database informa
Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary
Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL qu
Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute
Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database file
Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrar
Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows u
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authent
ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database que
PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL q
OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL qu
Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri
Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu
iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa
Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attac
Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauth
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers t
XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database q
Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel th
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malici
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started