cve.bz

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection), page 14

Filter

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

What the weakness is: CWE-89 at MITRE

Ask an AI about CWE-89

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-89: Improper Neutralization of Special Elements used in an SQL Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/89.html and https://cve.bz/cve/cwe/89?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.9CVE-2026-100683EPSS 0.3%

    Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw query string (backtick-quoted for MySQL, a single-quoted sp_re…

  2. 8.7CVE-2026-100644EPSS 0.4%

    SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where the dailyNoteSavePath parameter is concatenated into SQL without escaping. Unauthenticated attackers on published sites with auth disabled can in…

  3. 5.5CVE-2026-100315EPSS 0.3%

    A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file mydetailsfaculty.php. The manipulation of the argument myfid results in sql…

  4. 5.5CVE-2026-100314EPSS 0.3%

    A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromstudent.php. The manipulation of the argume…

  5. 2.1CVE-2026-100312EPSS 0.2%

    A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file /updateguest.php. Performing a manipulation of the argum…

  6. 6.8CVE-2026-89237EPSS 0.2%

    The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before using them as identifiers in a SQL query, allowing unauthenticated attackers to append additional SQL and extract sensitive information from the d…

  7. 6.5CVE-2026-84097EPSS 0.2%

    The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subs…

  8. 7.1CVE-2026-53629ExploitEPSS 1.0%

    GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This p…

  9. 2.1CVE-2026-97886EPSS 0.2%

    A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the ar…

  10. 5.5CVE-2026-97885EPSS 0.3%

    A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The…

  11. 2.1CVE-2026-97884EPSS 0.2%

    A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manip…

  12. 5.5CVE-2026-97883EPSS 0.3%

    A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the argument gid leads …

  13. 5.5CVE-2026-97882EPSS 0.4%

    A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file loginlinkfaculty.php of the component Faculty Authentication.…

  14. 9.1CVE-2026-62262EPSS 0.7%

    Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings[] value and then ope…

  15. 6.0CVE-2026-54790EPSS 0.3%

    InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane stores an administrator-controlled custom_field_table value without validating it against the allowed custom-f…

  16. 8.1CVE-2026-44642EPSS 1.3%

    Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, check_upgrade_access_rights() in admin/include/functions_upgrade.php conditionally escapes the submitted username only when the removed get_magic…

  17. 7.2CVE-2026-42324EPSS 0.9%

    Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/element_set_ranks.php stores administrator-controlled image_order[] values without enforcing the existing sort-field whitelist. The stored …

  18. 7.2CVE-2026-42323EPSS 0.9%

    Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/batch_manager.php accepts administrator-controlled dimension width, height, and ratio values and filesize values from the Batch Manager fil…

  19. 7.2CVE-2026-33639EPSS 0.5%

    InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane interpolates the administrator-controlled tax_rate_decimal_places setting into an ALTER TABLE statement for ip…

  20. 6.5CVE-2026-84893EPSS 0.2%

    IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

  21. 6.5CVE-2026-93899EPSS 0.3%

    The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to generic SQL Injection via 'group_id' Message Meta Parameter in all versions up to, and including, 3.0.4 due to insufficient…

  22. 2.1CVE-2026-97321EPSS 0.2%

    A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/servic…

  23. 9.3CVE-2026-13016EPSS 0.3%

    ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the i…

  24. 8.5CVE-2026-56738EPSS 0.3%

    phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement using `sprintf()` and inserts the user-supplied stop word value directly into the query string without …

  25. 5.4CVE-2026-47132EPSS 0.3%

    phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search f…

  26. 8.6CVE-2026-77874EPSS 0.3%

    IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view,…

  27. 8.8CVE-2026-78311EPSS 0.2%

    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  28. 8.8CVE-2026-78309EPSS 0.3%

    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  29. 5.5CVE-2026-96803EPSS 0.3%

    A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql le…

  30. 2.1CVE-2026-96777EPSS 0.2%

    A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoi…

  31. 5.5CVE-2026-96751EPSS 0.3%

    A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_project.php. Such manipulation of the argument conn_settings lea…

  32. 5.5CVE-2026-96604EPSS 0.4%

    A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql inj…

  33. 5.5CVE-2026-96602EPSS 0.4%

    A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The …

  34. 5.5CVE-2026-96601EPSS 0.4%

    A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack c…

  35. 7.6CVE-2026-96826EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6.

  36. 9.3CVE-2026-95601EPSS 0.3%

    Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.

  37. 7.6CVE-2026-95593EPSS 0.4%

    Editor SQL Injection in Ultimeter <= 3.0.8 versions.

  38. 7.1CVE-2026-95590EPSS 0.3%

    Subscriber SQL Injection in Tainacan <= 1.2.0 versions.

  39. 7.6CVE-2026-95522EPSS 0.4%

    Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.

  40. 7.6CVE-2026-94174EPSS 0.4%

    Administrator SQL Injection in Email Log <= 2.63 versions.

  41. 8.5CVE-2026-94124EPSS 0.2%

    Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

  42. 8.5CVE-2026-93773EPSS 0.4%

    Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.

  43. 8.5CVE-2026-93527EPSS 0.4%

    Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

  44. 6.9CVE-2026-92692EPSS 0.4%

    Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.0 release lines have a Smart Content QueryBuilder in src/Sulu/Component/Content/SmartContent/QueryB…

  45. 8.6CVE-2026-90902EPSS 0.3%

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task (administrator/index.php?option=com_easystore&task=coupon.couponBulkUpdate)…

  46. 8.6CVE-2026-90901EPSS 0.4%

    Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint (administrator/index.php?option=com_easystore&task=media.deleteImage) pa…

  47. 5.5CVE-2026-96514EPSS 0.4%

    A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of the argument uname causes sql injection. It is possible to i…

  48. 9.8CVE-2025-63564EPSS 0.7%

    SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests

  49. 8.7CVE-2026-96673EPSS 0.5%

    Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the album_id path segment. Attackers can supply crafted SQL expressions in the …

  50. 6.5CVE-2026-18180EPSS 0.5%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.