CWE-89
MITRE ↗Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unkno
A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file
A weakness has been identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The impacted eleme
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unkn
A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecomme
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f
A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unkn
A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file
A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. This vulnerability affects unknown
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown pro
A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /cus
A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via t
A SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via t
A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /op
A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php o
A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some un
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file
A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issu
A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the
A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the fil
A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file
A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the f
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerabilit
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code o
A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted elem
Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Org
Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchro
Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). Supp
Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). Suppor
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of t
Tanium addressed a SQL injection vulnerability in Patch.
A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the compo
A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affect
A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown fun
A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unkn
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown f
A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi
A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown funct
A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the fil
A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewa
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processin
A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an u
A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown functi
Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL
A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processin
A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of th
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of t
A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the
Frequently Asked Questions
What is CWE-89?
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-89?
There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.
How can I protect against CWE-89 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.
Detect CWE-89 Vulnerabilities
CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.
Get Started