CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file y
A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.chec
A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects u
A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an un
A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClass
A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /Online
A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the fil
A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassro
A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineCl
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknow
A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::appl
A vulnerability was identified in itsourcecode Courier Management System 1.0. This impacts an unknown function of the fi
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the fi
A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the fil
A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the fil
SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].
PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL
A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the
A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUp
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an un
A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of t
A vulnerability was identified in code-projects Employee Management System 1.0. This impacts an unknown function of the
A security flaw has been discovered in code-projects Employee Management System 1.0. Affected is an unknown function of
A weakness has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unk
A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of
A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of
A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of
A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionali
A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the com
A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-a
A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\j
A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\jav
A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\m
A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function o
A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of t
A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the fi
A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of
A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown proce
A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the fil
A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown fun
A vulnerability was found in CodeAstro Payroll System 1.0. This affects an unknown part of the file /home_employee.php.
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functi
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /man
A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the fil
A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /ma
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file
A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the
A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started