cve.bz

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection), page 25

Filter

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

What the weakness is: CWE-89 at MITRE

Ask an AI about CWE-89

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-89: Improper Neutralization of Special Elements used in an SQL Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/89.html and https://cve.bz/cve/cwe/89?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-77020EPSS 0.4%

    A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injectio…

  2. 5.5CVE-2026-77019EPSS 0.4%

    A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. Th…

  3. 5.5CVE-2026-76998EPSS 0.4%

    A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=delete_category. Such manipulation of the argument ID leads…

  4. 2.1CVE-2026-76997EPSS 0.3%

    A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_category. This manipulation of the argument ID causes sql injectio…

  5. 9.8CVE-2026-63039EPSS 0.7%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection. This issue affects Ap…

  6. 9.8CVE-2026-63038EPSS 0.7%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through the dbName, tableName, schemaName, and username parameters.  …

  7. 9.8CVE-2026-63037EPSS 0.7%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apach…

  8. 5.5CVE-2026-76996EPSS 0.4%

    A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view_order.php. The manipulation of the argument ID results in sql injection. The attack m…

  9. 2.1CVE-2026-76991EPSS 0.3%

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation …

  10. 5.5CVE-2026-76990EPSS 0.4%

    A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launc…

  11. 8.6CVE-2026-76635EPSS 0.4%

    baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequence …

  12. 7.6CVE-2026-74011EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.

  13. 7.1CVE-2026-77071EPSS 0.6%

    n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filter queries by concatenating an expression-bindable value withou…

  14. 8.5CVE-2026-74013EPSS 0.4%

    Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

  15. 8.5CVE-2026-73998EPSS 0.4%

    Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

  16. 9.3CVE-2026-68566EPSS 0.4%

    Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

  17. 9.3CVE-2026-66680EPSS 0.4%

    Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.

  18. 9.3CVE-2026-66649EPSS 0.4%

    Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

  19. 9.3CVE-2026-66609EPSS 0.4%

    Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

  20. 8.5CVE-2026-66594EPSS 0.4%

    Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

  21. 9.3CVE-2026-66593EPSS 0.4%

    Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

  22. 9.3CVE-2026-66592EPSS 0.4%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for Word…

  23. 9.3CVE-2025-15688EPSS 0.4%

    Unauthenticated SQL Injection in Capella <= 2.5.5 versions.

  24. 2.1CVE-2026-76785EPSS 0.3%

    A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy…

  25. 5.5CVE-2026-76783EPSS 0.4%

    A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This vulnerability affects unknown code of the file /plus/advancedsearch.php. Such manipulation of the argument sql leads to sql injection. The attack can be launched remotel…

  26. 5.5CVE-2026-76764EPSS 0.4%

    A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sq…

  27. 5.5CVE-2026-76762EPSS 0.4%

    A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched rem…

  28. 6.5CVE-2026-76364EPSS 0.4%

    In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOAR database through custom function results, allowing for …

  29. 6.5CVE-2026-76343EPSS 0.4%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language (SQL) queries through the Data Orchestration jobs …

  30. 4.3CVE-2026-76309EPSS 0.3%

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structured Query Language (SQL) through the Representational State Transfer (…

  31. 5.5CVE-2026-76574EPSS 0.4%

    A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument …

  32. 9.3CVE-2026-71867EPSS 0.7%

    Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a single quote in a schema property name is emitted into single-quoted object keys in generated MSW mock factories w…

  33. 9.3CVE-2026-71866EPSS 0.7%

    Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8.19.0 until 8.21.0, a double quote in a schema property name is emitted into the generated zod.object({...}) schema wit…

  34. 8.7CVE-2026-61518EPSS 0.5%

    ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized qu…

  35. 5.3CVE-2026-49392EPSS 0.3%

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/syscheckd/src/db/src/file.cpp concatenate a monitored file pat…

  36. 6.5CVE-2026-20327EPSS 0.3%

    A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to ins…

  37. 10.0CVE-2026-20030EPSS 0.6%

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that address…

  38. 9.3CVE-2026-75954EPSS 0.4%

    Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords and allow-lists the sort clause.

  39. 8.8CVE-2026-71176EPSS 0.4%

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit thi…

  40. 7.5CVE-2026-76240EPSS 0.4%

    stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a sche…

  41. 8.6CVE-2026-76205EPSS 0.4%

    phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal. Authenticated users with glossary add or edit permissions…

  42. 9.3CVE-2026-74804EPSS 0.4%

    Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filter_type request value is interpolated into the query as a.type = "..." and the type_filter array as a.type IN ("..."), w…

  43. 8.8CVE-2026-70422EPSS 0.4%

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit thi…

  44. 8.8CVE-2026-56088EPSS 0.4%

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit thi…

  45. 9.9CVE-2026-51366EPSS 0.8%

    SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and the utente_chat parameter

  46. 9.8CVE-2026-16019EPSS 0.5%

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0.

  47. 9.3CVE-2026-73391EPSS 0.4%

    Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.

  48. 9.3CVE-2026-73388EPSS 0.4%

    Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

  49. 9.3CVE-2026-73185EPSS 0.4%

    Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

  50. 9.3CVE-2026-73183EPSS 0.4%

    Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.