cve.bz

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection), page 12

Filter

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

What the weakness is: CWE-89 at MITRE

Ask an AI about CWE-89

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-89: Improper Neutralization of Special Elements used in an SQL Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/89.html and https://cve.bz/cve/cwe/89?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2026-97634EPSS 0.3%

    The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of…

  2. 6.5CVE-2026-12951EPSS 0.3%

    The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'order_by' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in versions up to and including 5.0.18. This is due to insuffici…

  3. 6.2CVE-2026-94298EPSS 0.2%

    The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the da…

  4. 5.5CVE-2026-104123EPSS 0.3%

    A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The m…

  5. 2.1CVE-2026-104053EPSS 0.2%

    A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible…

  6. 2.1CVE-2026-104052EPSS 0.2%

    A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible to…

  7. 8.6CVE-2026-103766EPSS 0.5%

    ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via the delete parameter in admin_area/ads_manager.php. Attackers can supply time-base…

  8. 6.5CVE-2026-56097EPSS 0.3%

    A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. T…

  9. 2.1CVE-2026-103690EPSS 0.2%

    A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may…

  10. 9.3CVE-2026-62071EPSS 0.2%

    Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions.

  11. 7.6CVE-2026-62060EPSS 0.2%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2.

  12. 7.6CVE-2026-62059EPSS 0.3%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.

  13. 8.5CVE-2026-103338EPSS 0.2%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL I…

  14. 8.5CVE-2026-102379EPSS 0.2%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Blind SQL Injection.This issue affec…

  15. 7.0CVE-2026-103253EPSS 0.2%

    n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or sche…

  16. 7.1CVE-2026-103248EPSS 0.3%

    n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filter injection vulnerability in the Supabase node's Filters (String) mode that fails to escape field values. Attackers can inject filter expr…

  17. 7.2CVE-2026-75786EPSS 0.2%

    Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards.

  18. 8.6CVE-2026-89296EPSS 0.3%

    The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

  19. 7.5CVE-2026-81809EPSS 0.2%

    The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled wit…

  20. 2.1CVE-2026-103543EPSS 0.2%

    A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The att…

  21. 7.1CVE-2026-102109EPSS 0.4%

    A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could p…

  22. 7.2CVE-2026-102098EPSS 1.0%

    Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying …

  23. 5.5CVE-2026-103232EPSS 0.3%

    A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Nam…

  24. 5.5CVE-2026-103231EPSS 0.3%

    A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of the file User/cancel.php of the component Order Cancellation…

  25. 5.5CVE-2026-103230EPSS 0.3%

    A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User/ord.php of the component Order Placement. Executing a mani…

  26. 5.5CVE-2026-103229EPSS 0.3%

    A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file admin/delete1.php of the component Unauthenticated Action Scr…

  27. 10.0CVE-2026-76570EPSS 0.5%

    Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, col…

  28. 7.6CVE-2026-62097EPSS 0.2%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6…

  29. 9.8CVE-2026-18782EPSS 0.5%

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection. This issue affects Trex MES:…

  30. 9.8CVE-2026-82307EPSS 0.3%

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection. This issue affects SOPLOG: before Soplog 2026.9.4.1.

  31. 8.5CVE-2026-97293EPSS 0.2%

    Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

  32. 8.5CVE-2026-97287EPSS 0.3%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.

  33. 7.6CVE-2026-96828EPSS 0.3%

    Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

  34. 7.6CVE-2026-96827EPSS 0.3%

    Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

  35. 9.3CVE-2026-96822EPSS 0.3%

    Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

  36. 7.6CVE-2026-96346EPSS 0.3%

    Author SQL Injection in WP ERP <= 1.17.9 versions.

  37. 7.6CVE-2026-96345EPSS 0.3%

    Administrator SQL Injection in Estatik <= 4.3.5 versions.

  38. 8.5CVE-2026-94177EPSS 0.3%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2.

  39. 8.5CVE-2026-94115EPSS 0.3%

    Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.

  40. 7.6CVE-2026-94082EPSS 0.3%

    Author SQL Injection in Quiz Cat <= 3.1.1 versions.

  41. 8.2CVE-2026-93621EPSS 0.2%

    Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.

  42. 7.6CVE-2026-62085EPSS 0.3%

    Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.

  43. 2.0CVE-2026-103117EPSS 0.3%

    A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads …

  44. 2.1CVE-2026-103116EPSS 0.2%

    A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LO_sort causes sq…

  45. 2.1CVE-2026-103115EPSS 0.2%

    A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql inject…

  46. 2.1CVE-2026-103114EPSS 0.2%

    A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQuery_assignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the …

  47. 2.0CVE-2026-103113EPSS 0.2%

    A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument…

  48. 8.8CVE-2026-102578EPSS 0.3%

    A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This is…

  49. 7.1CVE-2026-102456EPSS 0.3%

    EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents.

  50. 7.5CVE-2026-6806EPSS 0.3%

    The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on…