CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System up to 1.1.
A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown f
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affect
A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 1.0. Affected is an unkno
A vulnerability classified as critical was found in PHPGurukul Hospital Management System 1.0. Affected by this vulnerab
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected
A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects
A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.
A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is
A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part
A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown
A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function
A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerabili
A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some un
A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an
A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue i
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part
A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing
A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This
A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of
A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unkn
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects
code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1.
A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue
A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some
A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by
Umbraco workflow provides workflows for the Umbraco content management system. Prior to versions 10.3.9, 12.2.6, and 13.
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerabili
SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execu
A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by thi
AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/conference/calend
A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by th
A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulner
A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as criti
A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an un
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00),
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00),
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the delete
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Layout.LayoutSave
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in SnapShot.CountByCa
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Alert.Enum webapi
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Emap.Delete webapi
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog w
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in AudioPattern.Delet
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log.CountByCategor
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Recording.CountByC
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started