Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)

4,444
CRITICAL
7,116
HIGH
4,287
MEDIUM
104
LOW
16,171 CVEs · Page 230/324
5.5
CVE-2014-125076

A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of

5.5
CVE-2015-10038

A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unkno

5.5
CVE-2015-10039

A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functio

5.5
CVE-2015-10041

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is

5.5
CVE-2015-10042

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this

5.5
CVE-2017-20169

A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue i

5.5
CVE-2015-10020

A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the funct

5.5
CVE-2022-4889

A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function

5.5
CVE-2014-125077

A vulnerability, which was classified as critical, has been found in pointhi searx_stats. This issue affects some unknow

5.5
CVE-2014-125079

A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown cod

5.5
CVE-2015-10044

A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The man

5.5
CVE-2015-10045

A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function get

5.5
CVE-2015-10046

A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown f

5.5
CVE-2015-10047

A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of

5.5
CVE-2015-10048

A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown

5.5
CVE-2015-10050

A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerabili

5.5
CVE-2015-10051

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue i

5.5
CVE-2016-15018

A vulnerability was found in krail-jpa up to 0.9.1. It has been classified as critical. This affects an unknown part. Th

5.5
CVE-2013-10012

A vulnerability, which was classified as critical, was found in antonbolling clan7ups. Affected is an unknown function o

5.5
CVE-2016-15020

A vulnerability was found in liftkit database up to 2.13.1. It has been classified as critical. This affects the functio

5.5
CVE-2015-10053

A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown fu

5.5
CVE-2018-25076

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the f

5.5
CVE-2021-4313

A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function get_

5.5
CVE-2015-10054

A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of t

5.5
CVE-2015-10055

A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.pos

5.5
CVE-2015-10056

A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of

5.5
CVE-2015-10060

A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing

5.5
CVE-2017-20170

A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of th

5.5
CVE-2013-10013

A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects t

5.5
CVE-2015-10061

A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown

5.5
CVE-2016-15021

A vulnerability was found in nickzren alsdb. It has been rated as critical. This issue affects some unknown processing.

5.5
CVE-2015-10064

A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vu

5.5
CVE-2014-125081

A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown

5.5
CVE-2017-20171

A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the fi

5.5
CVE-2014-125082

A vulnerability was found in nivit redports. It has been declared as critical. This vulnerability affects unknown code o

5.5
CVE-2015-10066

A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/g

5.5
CVE-2010-10007

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in lierdakil click-reminder. It has been rated as critical. Th

5.5
CVE-2015-10068

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovie

5.5
CVE-2017-20172

A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_re

5.5
CVE-2011-10001

A vulnerability was found in iamdroppy phoenixcf. It has been declared as critical. Affected by this vulnerability is an

5.5
CVE-2012-10006

A vulnerability classified as critical has been found in ale7714 sigeprosi. This affects an unknown part. The manipulati

5.5
CVE-2017-20173

A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function L

5.5
CVE-2010-10009

A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. Th

5.5
CVE-2015-10069

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects th

5.5
CVE-2013-10014

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulat

5.5
CVE-2014-125083

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Af

5.5
CVE-2023-0515

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi

5.5
CVE-2023-0516

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit

5.5
CVE-2013-10015

A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown

5.5
CVE-2013-10016

A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processi

Frequently Asked Questions

What is CWE-89?

CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-89?

There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.

How can I protect against CWE-89 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.

Detect CWE-89 Vulnerabilities

CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.

Get Started