cve.bz

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection), page 17

Filter

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

What the weakness is: CWE-89 at MITRE

Ask an AI about CWE-89

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-89: Improper Neutralization of Special Elements used in an SQL Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/89.html and https://cve.bz/cve/cwe/89?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.7CVE-2026-53557EPSS 0.3%

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated user can supply a crafted sheet["tableName"] value in the Excel datasource configuration submitted through POST /api/v1/da…

  2. 6.0CVE-2026-53556EPSS 0.5%

    SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasource/crud/datasource.py incorporates the client-controlled table_nam…

  3. 8.3CVE-2026-54597EPSS 0.4%

    ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential record can perform time…

  4. 8.1CVE-2026-54596EPSS 0.5%

    ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the f…

  5. 8.2CVE-2026-54354EPSS 0.7%

    MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter() treats a filteritem as numeric when CONNECTIONTYPE PO…

  6. 9.8CVE-2025-55787EPSS 0.5%

    In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

  7. 7.1CVE-2026-54524EPSS 0.5%

    Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In hrms/payroll/report…

  8. 7.1CVE-2026-52851EPSS 0.4%

    Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an object usable in a permission pair can submit DELETE /api/permissions with an extra attacker-controlled JSON key. Permiss…

  9. 5.5CVE-2026-92926EPSS 0.4%

    A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The …

  10. 8.4CVE-2026-93292EPSS 0.4%

    SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields into ClickHouse string literals without escaping. Authenticated attacke…

  11. 9.2CVE-2026-79752EPSS 0.6%

    CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuild…

  12. 7.6CVE-2026-66631EPSS 0.4%

    Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.

  13. 7.6CVE-2026-66630EPSS 0.4%

    Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.

  14. 7.6CVE-2026-66628EPSS 0.4%

    Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.

  15. 7.6CVE-2026-66626EPSS 0.4%

    Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.

  16. 7.6CVE-2026-66625EPSS 0.4%

    Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.

  17. 7.6CVE-2026-66624EPSS 0.4%

    Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

  18. 7.6CVE-2026-66619EPSS 0.4%

    Administrator SQL Injection in Newsletters <= 4.18 versions.

  19. 7.6CVE-2026-66618EPSS 0.4%

    Administrator SQL Injection in WP Maps <= 4.9.9 versions.

  20. 8.5CVE-2026-66580EPSS 0.4%

    Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.

  21. 8.2CVE-2026-92903EPSS 0.2%

    Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious …

  22. 8.6CVE-2026-87963EPSS 0.4%

    The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers …

  23. 4.9CVE-2026-76449EPSS 0.4%

    A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability…

  24. 4.9CVE-2026-76448EPSS 0.4%

    A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability…

  25. 4.9CVE-2026-76428EPSS 0.5%

    A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatena…

  26. 4.9CVE-2026-76426EPSS 0.5%

    A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient validation of speci…

  27. 7.6CVE-2026-76425EPSS 0.4%

    A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are co…

  28. 9.1CVE-2026-75513EPSS 0.5%

    Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL …

  29. 8.8CVE-2026-20344EPSS 0.5%

    A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must…

  30. 7.1CVE-2026-20300EPSS 0.4%

    A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. …

  31. 7.5CVE-2026-20247EPSS 0.5%

    A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this…

  32. 4.9CVE-2026-20235EPSS 0.5%

    A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrativ…

  33. 2.1CVE-2026-92526EPSS 0.3%

    A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remo…

  34. 8.8CVE-2026-87105EPSS 0.4%

    Tanium addressed a SQL injection vulnerability in Threat Response.

  35. 7.2CVE-2026-87024EPSS 0.4%

    Tanium addressed a SQL injection vulnerability in Asset.

  36. 7.2CVE-2026-86865EPSS 0.4%

    Tanium addressed a SQL injection vulnerability in Asset.

  37. 8.8CVE-2026-20361EPSS 0.4%

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that a…

  38. 5.5CVE-2026-92406EPSS 0.4%

    A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn_functions.php?action=add. Performing a manipulation of the argumen…

  39. 5.5CVE-2026-92405EPSS 0.4%

    A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The at…

  40. 6.5CVE-2026-84993EPSS 0.5%

    MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared SQL layer validates the field key of an orderBy clause but does not validate its direction value b…

  41. 5.5CVE-2026-92366EPSS 0.6%

    A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/r…

  42. 6.5CVE-2026-84859EPSS 0.4%

    ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL …

  43. 2.1CVE-2026-92364EPSS 0.3%

    A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It i…

  44. 7.6CVE-2026-92465EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2.

  45. 8.9CVE-2026-8462EPSS 0.5%

    SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify metering event data, and potentially cause denial of service, …

  46. 8.6CVE-2026-78472EPSS 0.4%

    The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.

  47. 6.8CVE-2026-76557EPSS 0.4%

    The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the WP Import Expor…

  48. 6.8CVE-2026-76556EPSS 0.4%

    The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, allowing users holding its export permission, which administrators have by defaul…

  49. 6.5CVE-2026-16588EPSS 0.4%

    The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient prep…

  50. 2.0CVE-2026-92221EPSS 0.3%

    A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generate_index_pasien of the file application/models/app_global_admin_model.php…