cve.bz

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection), page 26

Filter

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

What the weakness is: CWE-89 at MITRE

Ask an AI about CWE-89

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-89: Improper Neutralization of Special Elements used in an SQL Command and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/89.html and https://cve.bz/cve/cwe/89?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.5CVE-2026-66668EPSS 0.4%

    Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.

  2. 8.5CVE-2026-32552EPSS 0.4%

    Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.

  3. 8.6CVE-2026-16950EPSS 0.4%

    The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.

  4. 8.6CVE-2026-12983EPSS 0.4%

    The Dinatur WordPress plugin through 1.18 does not sanitize and escape user input before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The same handler also performs a database table truncation w…

  5. 5.5CVE-2026-76050EPSS 0.4%

    A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete_menu. The manipulation of the argument ID results in sql injection. It is possib…

  6. 5.5CVE-2026-76049EPSS 0.4%

    A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=save_menu. The manipulation of the argument ID leads to sql injection. It is possi…

  7. 5.5CVE-2026-76048EPSS 0.4%

    A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injecti…

  8. 5.5CVE-2026-75986EPSS 0.4%

    A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to s…

  9. 7.2CVE-2026-54348EPSS 0.7%

    Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in panel_admins.ip …

  10. 2.1CVE-2026-75876EPSS 0.3%

    A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the a…

  11. 5.3CVE-2026-47720EPSS 0.6%

    FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape ba…

  12. 9.3CVE-2026-74015EPSS 0.4%

    Unauthenticated SQL Injection in Readabler < 2.0.18 versions.

  13. 9.3CVE-2026-73365EPSS 0.4%

    Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

  14. 9.3CVE-2026-73355EPSS 0.4%

    Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

  15. 7.1CVE-2026-73345EPSS 0.3%

    Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.

  16. 9.3CVE-2026-73339EPSS 0.4%

    Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.

  17. 9.3CVE-2026-73187EPSS 0.4%

    Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.

  18. 7.5CVE-2026-66622EPSS 0.3%

    Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.

  19. 8.5CVE-2026-32466EPSS 0.4%

    Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.

  20. 5.5CVE-2026-75778EPSS 0.4%

    A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email lea…

  21. 5.5CVE-2026-75089EPSS 0.4%

    A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/check_availability.php. This manipulation of the argument email causes sql injection. Remot…

  22. 2.1CVE-2026-75088EPSS 0.3%

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launc…

  23. 2.1CVE-2026-75087EPSS 0.3%

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiat…

  24. 2.1CVE-2026-75086EPSS 0.3%

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch …

  25. 5.5CVE-2026-75080EPSS 0.4%

    A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_subject1.php. The manipulation of the argument ID leads to sql injection. The …

  26. 5.5CVE-2026-75079EPSS 0.4%

    A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_subject2.php. Executing a manipulation of the argument ID can lead to sql injection. The atta…

  27. 9.8CVE-2026-67854EPSS 0.7%

    SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

  28. 9.8CVE-2026-67917EPSS 0.6%

    zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The `azuracast:restore` command executes the `db.sql` file extracted from a backup archive without any content validati…

  29. 7.6CVE-2026-65822EPSS 0.5%

    ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactive_customers/inactive_customers.py accepts an unvalidated doctype filter and interpolates it into raw SQL in g…

  30. 8.4CVE-2026-64657EPSS 0.4%

    Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/src/integrations/postgres.ts interpolates the user-controlled schema configuration field into a SET search_path statemen…

  31. 5.5CVE-2026-75014EPSS 0.4%

    A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/get_barcode_data.php. This manipulation of the argument barcode causes sql injection. The attack may b…

  32. 9.3CVE-2026-74254EPSS 0.4%

    Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in t…

  33. 9.1CVE-2026-51346EPSS 0.7%

    SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.

  34. 9.8CVE-2026-50769EPSS 0.6%

    The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=tru…

  35. 2.1CVE-2026-20000EPSS 0.3%

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possib…

  36. 9.4CVE-2026-15623EPSS 0.3%

    A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted r…

  37. 2.1CVE-2026-19973EPSS 0.3%

    A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injecti…

  38. 2.1CVE-2026-19972EPSS 0.3%

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from r…

  39. 9.3CVE-2026-74251EPSS 0.4%

    Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Phoca Cart's public shop items page are concatenated raw into…

  40. 7.2CVE-2026-2497EPSS 0.6%

    The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, and including, 4.7.9. This is due to insufficient escaping on the user supplied p…

  41. 6.5CVE-2026-9767EPSS 0.6%

    The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 5.4 due to insufficient escaping on the user supplied para…

  42. 4.9CVE-2026-2283EPSS 0.5%

    The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient …

  43. 2.1CVE-2026-19934EPSS 0.3%

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried…

  44. 7.2CVE-2026-18653EPSS 0.4%

    The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. On a multisite installation this lets an administrato…

  45. 4.9CVE-2026-17582EPSS 0.5%

    The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() function. Slide data (description, title, btn, btn2, image_link, custom, etc.) is …

  46. 4.9CVE-2026-15351EPSS 0.5%

    The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to generic SQL Injection via the 'status' parameter in all versions up to, and including, 2.7.0 due to insufficient escap…

  47. 6.5CVE-2026-16079EPSS 0.5%

    The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content in all versions up to, and including, 1.6.12 due to insufficient escaping on the user supplied parameter and lack of s…

  48. 6.5CVE-2026-15963EPSS 0.5%

    The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in all versions up to, and including, 11.2.1 due to insufficient escaping on the us…

  49. 4.9CVE-2026-15602EPSS 0.4%

    The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and including, 9.2.4 due to insufficient escaping on the user supp…

  50. 5.5CVE-2026-19926EPSS 0.4%

    A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql…