CWE-89

High likelihood

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Parent: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

19,591 vulnerabilities with CWE-89
CVE-2025-7607 HIGH
code-projects Simple Shopping Cart 1.0 - SQL Injection
CVSS 7.3
CVE-2025-7606 HIGH
code-projects AVL Rooms 1.0 - SQL Injection
CVSS 7.3
CVE-2025-7605 HIGH
AVL Rooms 1.0 - SQL Injection via Profile First Name Parameter
CVSS 7.3
CVE-2025-7604 HIGH
PHPGurukul Hospital Management System 4.0 - SQL Injection
CVSS 7.3
CVE-2025-7600 MEDIUM
PHPGurukul Online Library Management System 3.0 - SQL Injection
CVSS 6.3
CVE-2025-7599 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7595 HIGH
Job Diary 1.0 - SQL Injection via /view-cad.php ID Parameter
CVSS 7.3
CVE-2025-7594 HIGH
Job Diary 1.0 - SQL Injection via /view-emp.php ID Parameter
CVSS 7.3
CVE-2025-7593 HIGH
Job Diary 1.0 - SQL Injection via /view-all.php ID Parameter
CVSS 7.3
CVE-2025-7592 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7591 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7590 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7589 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7588 MEDIUM
PHPGurukul Dairy Farm Shop Management System 1.3 - SQL Injection
CVSS 6.3
CVE-2025-7587 HIGH
code-projects Online Appointment Booking System 1.0 - SQL Injection
CVSS 7.3
CVE-2025-7585 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7584 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7583 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7582 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7581 MEDIUM
code-projects Voting System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-7580 MEDIUM
code-projects Voting System 1.0 - SQL Injection
CVSS 6.3
CVE-2025-7568 MEDIUM
qianfox FoxCMS <1.2.5 - SQL Injection
CVSS 6.3
CVE-2025-7563 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7562 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
CVE-2025-7561 MEDIUM
PHPGurukul Online Fire Reporting System 1.2 - SQL Injection
CVSS 6.3
Details
Vulnerabilities 19,591
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits