CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter.
SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attac
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro gr
The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query
SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (su
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic
A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Aff
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affecte
A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by th
A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects s
A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unkn
A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management S
A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by t
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as criti
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by th
A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an
A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown func
A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management S
A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affecte
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System
A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by thi
A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the
A vulnerability was found in 404like Plugin up to 1.0.2 on WordPress. It has been classified as critical. Affected is th
A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService o
A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issu
A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0.
A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart S
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected i
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnera
A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an un
A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been declared as critical. A
A vulnerability has been found in Caton CTP Relay Server 1.2.9 and classified as critical. This vulnerability affects un
A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function ch
A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affe
A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affe
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unkno
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specia
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This aff
A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerabil
A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This
A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability
A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This aff
A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affec
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected b
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started