CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to ex
An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet
In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker
Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purch
A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthen
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnera
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allo
SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.
Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could s
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of
SQL Injection exits in xinhu < 2.5.0
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-b
Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of speci
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr
Unauthenticated SQL Injection (SQLi) vulnerability discovered in [GWA] AutoResponder WordPress plugin (versions <= 2.3),
A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. A
A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vul
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issu
A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments l
A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown function
A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the
A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability
A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code
A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affec
A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unkno
A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is so
A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability
A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerabi
A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this
A vulnerability was found in SourceCodester Loan Management System. It has been rated as critical. Affected by this issu
A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerabi
A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects u
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown p
A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some u
A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this v
A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown par
A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. Thi
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner
A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/
A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of
A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some u
A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started