Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)

4,444
CRITICAL
7,116
HIGH
4,287
MEDIUM
104
LOW
16,171 CVEs · Page 83/324
7.3
CVE-2025-0486

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerabil

7.3
CVE-2025-0527

A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vuln

7.3
CVE-2025-0533

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as cr

7.3
CVE-2025-0534

A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as criti

7.3
CVE-2025-0564

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulne

7.3
CVE-2025-0565

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functiona

7.3
CVE-2025-0579

A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulne

7.3
CVE-2025-0803

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by thi

7.3
CVE-2025-0842

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unkno

7.3
CVE-2025-0843

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unkno

7.3
CVE-2025-0846

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This

7.3
CVE-2025-0847

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This v

7.3
CVE-2024-57238

Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The

7.3
CVE-2025-1116

A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on O

7.3
CVE-2025-1117

A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an un

7.3
CVE-2025-1156

A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unkno

7.3
CVE-2025-1464

A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204.

7.3
CVE-2025-1535

A vulnerability was found in Baiyi Cloud Asset Management System 8.142.100.161. It has been classified as critical. This

7.3
CVE-2025-1596

A vulnerability was found in SourceCodester Best Church Management Software 1.0 and classified as critical. This issue a

7.3
CVE-2025-1640

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some un

7.3
CVE-2025-1641

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown

7.3
CVE-2025-1808

A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknow

7.3
CVE-2025-1809

A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown proces

7.3
CVE-2025-1811

A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this

7.3
CVE-2025-1840

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some u

7.3
CVE-2025-1841

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the

7.3
CVE-2025-1850

A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by

7.3
CVE-2025-1856

A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue i

7.3
CVE-2025-1857

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affe

7.3
CVE-2025-1858

A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unk

7.3
CVE-2025-1859

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some

7.3
CVE-2025-1894

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by

7.3
CVE-2025-1900

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this

7.3
CVE-2025-1901

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This af

7.3
CVE-2025-1902

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability

7.3
CVE-2025-1903

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects som

7.3
CVE-2025-1952

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected

7.3
CVE-2025-1954

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as cri

7.3
CVE-2025-1956

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part

7.3
CVE-2025-1959

A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unkno

7.3
CVE-2025-1962

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an

7.3
CVE-2025-1963

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerabilit

7.3
CVE-2025-1964

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects s

7.3
CVE-2025-1965

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown

7.3
CVE-2025-1966

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulner

7.3
CVE-2025-2030

A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been ra

7.3
CVE-2025-2034

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

7.3
CVE-2025-2050

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3.

7.3
CVE-2025-2057

A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affect

7.3
CVE-2025-2058

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected

Frequently Asked Questions

What is CWE-89?

CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-89?

There are 24,110 CVE records associated with CWE-89 in our database. Of these, 4444 are critical severity, 7116 are high severity, and 4287 are medium severity.

How can I protect against CWE-89 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-89 using AI-powered security agents.

Detect CWE-89 Vulnerabilities

CyberStrike's AI agents automatically detect improper neutralization of special elements used in an sql command (sql injection) vulnerabilities across your infrastructure.

Get Started