CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects th
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This
A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff
A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue af
A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown functio
SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive
SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows at
In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fu
A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critic
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.
A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Af
A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affecte
A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy
A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System
A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability
A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some u
A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an u
A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnera
A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability aff
A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown proces
A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critica
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affe
A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unkn
A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the f
A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affecte
A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected
A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue
A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects a
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affe
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulner
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue aff
A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affec
A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is
A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function action
A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the fil
A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critic
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulne
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This
A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical. This vulnerabili
A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects th
A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is
A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the f
A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started