CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affe
A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability
A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects u
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewa
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this i
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne
A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affecte
A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerabili
A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects a
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnera
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affec
A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affe
A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Thi
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this
A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an
A vulnerability was found in SourceCodester Modern Loan Management System 1.0. It has been classified as critical. Affec
A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0.
A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unkn
A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacke
A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the
A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff922722
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as crit
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerabili
A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.
A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an
A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is
A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability a
A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This i
A vulnerability has been found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected b
A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown func
A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delC
SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which cou
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this
A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an un
A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unkn
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an u
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by th
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an u
A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. This vulnerability aff
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This
A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actio
A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of t
A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdate
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started