CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the
A vulnerability was detected in griptape-ai griptape 0.19.4. Affected by this issue is some unknown functionality of the
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown
A vulnerability has been found in itsourcecode Construction Management System 1.0. Affected is an unknown function of th
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unk
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the fil
A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /adm
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown func
A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function
A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unk
A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown fu
A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /
A flaw has been found in itsourcecode sanitize or validate this input 1.0. This impacts an unknown function of the file
A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /
A weakness has been identified in itsourcecode Construction Management System 1.0. Affected by this issue is some unknow
A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function
A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown
A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the fi
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknow
A flaw has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /updatedet
A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown functio
A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t
A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po
A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This vulnerability affec
A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query
Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`g
A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknow
A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file pa
A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function Execut
A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file
A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code
A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the f
A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an u
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown funct
A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Execut
A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the fil
A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items o
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the f
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_o
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects an unknown function of the file /view
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category o
A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boo
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save_supplier
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function dele
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects unknown code o
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of
A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1. The impacted element is an unknown funct
A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started