CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVP
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPM
A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects a
A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability
A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. Th
A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affecte
A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected b
A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by thi
A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This a
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressference Press
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part
SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL c
SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL c
SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL co
SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name
A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability
A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unk
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Af
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affecte
A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affec
A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerabil
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0
A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerabilit
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Foxskav Easy Bet.T
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adastra Crypto Cry
A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown
A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability i
A vulnerability has been found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this vu
A vulnerability was found in 7-card Fakabao up to 1.0_build20230805 and classified as critical. Affected by this issue i
A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been classified as critical. This affects an
A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been declared as critical. This vulnerabilit
A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006. Affected by this vulnerabili
A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0_build20220529-20231006. Affected by
A vulnerability, which was classified as critical, was found in S-CMS up to 2.0_build20220529-20231006. This affects an
There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input
A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a speci
A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid v3.0.5 allows attackers
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo
A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat. This can be e
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection v
Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowin
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerabili
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by th
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started