CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vuln
A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management Syst
A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affec
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critic
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. T
A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affe
A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected
A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected
A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critica
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affec
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critic
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. T
A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affe
A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected
A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management Syst
A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This
A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 al
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xm
A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the functi
A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Affected is an unknown
A vulnerability was found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this issue is
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. This affects an u
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. This vulnerability
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects som
A vulnerability classified as critical was found in SourceCodester Best House Rental Management System up to 1.0. Affect
A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System
A vulnerability, which was classified as critical, was found in SourceCodester Best House Rental Management System up to
A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critica
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been dec
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by
A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affec
A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by t
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This v
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issu
A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is
A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 all
A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Aff
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentif
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started