CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function act
A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of
A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the funct
A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLo
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetS
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulner
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. This issue aff
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. Affected is an un
A vulnerability classified as critical was found in code-projects Pharmacy Management System 1.0. Affected by this vulne
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affec
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this vulner
A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this issue is so
A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by thi
A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affe
A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical.
A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability aff
A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This
A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects
A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functiona
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the fil
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code o
A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_Do
A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue af
A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function a
A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDe
A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.
A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id para
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.
A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This
A vulnerability has been found in code-projects Blood Bank Management up to 1.0 and classified as critical. This vulnera
A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some
A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Aff
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulner
A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affec
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affecte
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected
A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability
A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. T
A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Af
A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affec
A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected b
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects a
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerabili
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vul
A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as cri
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unkn
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of th
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started