CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects
A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown f
A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unkn
A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of t
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the fil
A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /syst
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of
A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. Thi
A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the f
A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown functi
A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processin
A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function
A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of t
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown funct
A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of t
A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the f
A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the fi
A vulnerability was found in itsourcecode News Portal Project 1.0. This issue affects some unknown processing of the fil
A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/ge
A flaw has been found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /settin
A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of t
A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unkno
A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is s
A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the f
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown proc
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an
A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown functio
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown fu
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknow
A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unkno
A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the
A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of
A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability i
A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown
A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an u
A weakness has been identified in projectworlds Online Art Gallery Shop 1.0. Affected by this issue is some unknown func
A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of
A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code o
A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the
A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebSer
A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code
A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basi
A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of
A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the f
A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenti
A vulnerability was detected in JawherKl node-api-postgres up to 2.5. This impacts the function User.getAll of the file
A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing
A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove_training_data of the file src/vann
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started