René's URL Explorer Experiment


Title: CWE - CWE-89: Improper Neutralization of Special Elements used in an SQL Command (5.0)

Description: Common Weakness Enumeration (CWE) is a list of software weaknesses.

Mail addresses
cwe@mitre.org

direct link

Domain: cwe.mitre.org

NoneIE=Edge

Links:

Common Weakness Enumeration Celebrating 20 years of community-developed cybersecurity weakness knowledge! https://cwe.mitre.org/index.html
https://cwe.mitre.org/about/new_to_cwe.html
https://cwe.mitre.org/topHW/index.html
https://cwe.mitre.org/top25/
Homehttps://cwe.mitre.org/
CWE Listhttps://cwe.mitre.org/data/index.html
Homehttps://cwe.mitre.org/index.html
Who We Arehttps://cwe.mitre.org/about/index.html
User Storieshttps://cwe.mitre.org/about/user_stories.html
Historyhttps://cwe.mitre.org/about/history.html
Documentshttps://cwe.mitre.org/about/documents.html
Videoshttps://cwe.mitre.org/about/cwe_videos.html
Basicshttps://cwe.mitre.org/about/new_to_cwe.html
Root Cause Mapping   ►https://cwe.mitre.org/documents/cwe_usage/guidance.html
Guidancehttps://cwe.mitre.org/documents/cwe_usage/guidance.html
Quick Tipshttps://cwe.mitre.org/documents/cwe_usage/quick_tips.html
Exampleshttps://cwe.mitre.org/documents/cwe_usage/mapping_examples.html
How to Contribute Weakness Contenthttps://cwe.mitre.org/community/submissions/overview.html
FAQshttps://cwe.mitre.org/about/faq.html
Glossaryhttps://cwe.mitre.org/documents/glossary/index.html
Top-N Lists   ►https://cwe.mitre.org/scoring/index.html#top_n_lists
Top 25 Softwarehttps://cwe.mitre.org/top25/
Top Hardwarehttps://cwe.mitre.org/topHW/index.html
Top 10 KEV Weaknesseshttps://cwe.mitre.org/top25/archive/2025/2025_kev_list.html
CWE List   ►https://cwe.mitre.org/data/index.html
Current Versionhttps://cwe.mitre.org/data/index.html
Reportshttps://cwe.mitre.org/data/reports.html
Visualizationshttps://cwe.mitre.org/data/pdfs.html
Releases Archivehttps://cwe.mitre.org/data/archive.html
Downloadshttps://cwe.mitre.org/data/downloads.html
REST APIhttps://github.com/CWE-CAPEC/REST-API-wg/blob/main/Quick%20Start.md
News   ►https://cwe.mitre.org/news/
Current Newshttps://cwe.mitre.org/news/archives/news2026.html
Bloghttps://medium.com/@CWE_CAPEC
Podcasthttps://cwe.mitre.org/news/podcast.html
News Archivehttps://cwe.mitre.org/news/archives/index.html
CWE Boardhttps://cwe.mitre.org/community/board.html
Working Groups & Special Interest Groupshttps://cwe.mitre.org/community/working_groups.html
Email Listshttps://cwe.mitre.org/community/registration.html
Search CWE Listhttps://cwe.mitre.org/
Search Websitehttps://cwe.mitre.org/find/index.html
javascript:styledPopupClose();
Vulnerability Mappinghttps://cwe.mitre.org/data/definitions/89.html#Vulnerability_Mapping_Notes_89
javascript:toggleblocksOC('89_Description');
https://cwe.mitre.org/data/images/CWE-89-Diagram.png
javascript:toggleblocksOC('89_Dimensions');
javascript:toggleblocksOC('89_Alternate_Terms');
javascript:toggleblocksOC('89_Common_Consequences');
javascript:toggleblocksOC('89_Potential_Mitigations');
REF-1482https://cwe.mitre.org/data/definitions/89.html#REF-1482_89
REF-867https://cwe.mitre.org/data/definitions/89.html#REF-867_89
REF-76https://cwe.mitre.org/data/definitions/89.html#REF-76_89
CWE-602https://cwe.mitre.org/data/definitions/602.html
CWE-88https://cwe.mitre.org/data/definitions/88.html
CWE-95https://cwe.mitre.org/data/definitions/95.html
CWE-621https://cwe.mitre.org/data/definitions/621.html
javascript:toggleblocksOC('89_Relationships');
javascript:toggleblocksOC('89_1000_relevant_table');
943https://cwe.mitre.org/data/definitions/943.html
564https://cwe.mitre.org/data/definitions/564.html
456https://cwe.mitre.org/data/definitions/456.html
javascript:toggleblocksOC('89_699_relevant_table');
137https://cwe.mitre.org/data/definitions/137.html
javascript:toggleblocksOC('89_1003_relevant_table');
74https://cwe.mitre.org/data/definitions/74.html
javascript:toggleblocksOC('89_1008_relevant_table');
1019https://cwe.mitre.org/data/definitions/1019.html
javascript:toggleblocksOC('89_1305_relevant_table');
564https://cwe.mitre.org/data/definitions/564.html
javascript:toggleblocksOC('89_928_relevant_table');
564https://cwe.mitre.org/data/definitions/564.html
javascript:toggleblocksOC('89_Modes_Of_Introduction');
javascript:toggleblocksOC('89_Applicable_Platforms');
javascript:toggleblocksOC('89_Likelihood_Of_Exploit');
javascript:toggleblocksOC('89_Demonstrative_Examples');
CWE-285https://cwe.mitre.org/data/definitions/285.html
javascript:toggleblocksOC('89_Observed_Examples');
CVE-2024-6847https://www.cve.org/CVERecord?id=CVE-2024-6847
CVE-2025-26794https://www.cve.org/CVERecord?id=CVE-2025-26794
CVE-2023-32530https://www.cve.org/CVERecord?id=CVE-2023-32530
CVE-2021-42258https://www.cve.org/CVERecord?id=CVE-2021-42258
CVE-2021-27101https://www.cve.org/CVERecord?id=CVE-2021-27101
CVE-2020-12271https://www.cve.org/CVERecord?id=CVE-2020-12271
CVE-2019-3792https://www.cve.org/CVERecord?id=CVE-2019-3792
CVE-2004-0366https://www.cve.org/CVERecord?id=CVE-2004-0366
CVE-2008-2790https://www.cve.org/CVERecord?id=CVE-2008-2790
CVE-2008-2223https://www.cve.org/CVERecord?id=CVE-2008-2223
CVE-2007-6602https://www.cve.org/CVERecord?id=CVE-2007-6602
CVE-2008-5817https://www.cve.org/CVERecord?id=CVE-2008-5817
CVE-2003-0377https://www.cve.org/CVERecord?id=CVE-2003-0377
CVE-2008-2380https://www.cve.org/CVERecord?id=CVE-2008-2380
CVE-2017-11508https://www.cve.org/CVERecord?id=CVE-2017-11508
javascript:toggleblocksOC('89_Weakness_Ordinalities');
javascript:toggleblocksOC('89_Detection_Methods');
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
REF-1479https://cwe.mitre.org/data/definitions/89.html#REF-1479_89
javascript:toggleblocksOC('89_Memberships');
635https://cwe.mitre.org/data/definitions/635.html
713https://cwe.mitre.org/data/definitions/713.html
722https://cwe.mitre.org/data/definitions/722.html
727https://cwe.mitre.org/data/definitions/727.html
751https://cwe.mitre.org/data/definitions/751.html
801https://cwe.mitre.org/data/definitions/801.html
810https://cwe.mitre.org/data/definitions/810.html
864https://cwe.mitre.org/data/definitions/864.html
884https://cwe.mitre.org/data/definitions/884.html
929https://cwe.mitre.org/data/definitions/929.html
990https://cwe.mitre.org/data/definitions/990.html
1005https://cwe.mitre.org/data/definitions/1005.html
1027https://cwe.mitre.org/data/definitions/1027.html
1131https://cwe.mitre.org/data/definitions/1131.html
1200https://cwe.mitre.org/data/definitions/1200.html
1308https://cwe.mitre.org/data/definitions/1308.html
1337https://cwe.mitre.org/data/definitions/1337.html
1340https://cwe.mitre.org/data/definitions/1340.html
1347https://cwe.mitre.org/data/definitions/1347.html
1350https://cwe.mitre.org/data/definitions/1350.html
1387https://cwe.mitre.org/data/definitions/1387.html
1409https://cwe.mitre.org/data/definitions/1409.html
1425https://cwe.mitre.org/data/definitions/1425.html
1430https://cwe.mitre.org/data/definitions/1430.html
1435https://cwe.mitre.org/data/definitions/1435.html
1440https://cwe.mitre.org/data/definitions/1440.html
1454https://cwe.mitre.org/data/definitions/1454.html
1468https://cwe.mitre.org/data/definitions/1468.html
javascript:toggleblocksOC('89_Vulnerability_Mapping_Notes');
javascript:toggleblocksOC('89_Notes');
javascript:toggleblocksOC('89_Taxonomy_Mappings');
javascript:toggleblocksOC('89_Related_Attack_Patterns');
CAPEC-108http://capec.mitre.org/data/definitions/108.html
CAPEC-109http://capec.mitre.org/data/definitions/109.html
CAPEC-110http://capec.mitre.org/data/definitions/110.html
CAPEC-470http://capec.mitre.org/data/definitions/470.html
CAPEC-66http://capec.mitre.org/data/definitions/66.html
CAPEC-7http://capec.mitre.org/data/definitions/7.html
javascript:toggleblocksOC('89_References');
https://phrack.org/issues/54/8https://phrack.org/issues/54/8
https://www.microsoftpressstore.com/store/writing-secure-code-9780735617223https://www.microsoftpressstore.com/store/writing-secure-code-9780735617223
https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.htmlhttps://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html
http://www.unixwiz.net/techtips/sql-injection.htmlhttp://www.unixwiz.net/techtips/sql-injection.html
https://web.archive.org/web/20080126180244/http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/https://web.archive.org/web/20080126180244/http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/
https://learn.microsoft.com/en-us/previous-versions/sql/sql-server-2008-r2/ms161953(v=sql.105)?redirectedfrom=MSDNhttps://learn.microsoft.com/en-us/previous-versions/sql/sql-server-2008-r2/ms161953%28v=sql.105%29?redirectedfrom=MSDN
https://msrc.microsoft.com/blog/2008/05/sql-injection-attack/https://msrc.microsoft.com/blog/2008/05/sql-injection-attack/
https://learn.microsoft.com/en-us/archive/blogs/michael_howard/giving-sql-injection-the-respect-it-deserveshttps://learn.microsoft.com/en-us/archive/blogs/michael_howard/giving-sql-injection-the-respect-it-deserves
https://www.sans.org/blog/top-25-series-rank-2-sql-injection/https://www.sans.org/blog/top-25-series-rank-2-sql-injection/
https://web.archive.org/web/20211209014121/https://www.cisa.gov/uscert/bsi/articles/knowledge/principles/least-privilegehttps://web.archive.org/web/20211209014121/https://www.cisa.gov/uscert/bsi/articles/knowledge/principles/least-privilege
http://www.omg.org/spec/ASCSM/1.0/http://www.omg.org/spec/ASCSM/1.0/
https://www.cisa.gov/resources-tools/resources/secure-design-alert-eliminating-sql-injection-vulnerabilities-softwarehttps://www.cisa.gov/resources-tools/resources/secure-design-alert-eliminating-sql-injection-vulnerabilities-software
https://www.ida.org/-/media/feature/publications/s/st/stateoftheart-resources-soar-for-software-vulnerability-detection-test-and-evaluation/p-5061.ashxhttps://www.ida.org/-/media/feature/publications/s/st/stateoftheart-resources-soar-for-software-vulnerability-detection-test-and-evaluation/p-5061.ashx
https://d3fend.mitre.org/dao/artifact/d3f:ApplicationLayerFirewall/https://d3fend.mitre.org/dao/artifact/d3f:ApplicationLayerFirewall/
https://github.com/OWASP/Go-SCPhttps://github.com/OWASP/Go-SCP
https://d3fend.mitre.org/technique/d3f:TrustedLibrary/https://d3fend.mitre.org/technique/d3f:TrustedLibrary/
https://www.omg.org/spec/ATDM2/1.0/PDFhttps://www.omg.org/spec/ATDM2/1.0/PDF
https://best.openssf.org/Secure-Coding-Guide-for-Python/https://best.openssf.org/Secure-Coding-Guide-for-Python/
javascript:toggleblocksOC('89_Content_History');
javascript:toggleblocksOC('89_Submissions');
javascript:toggleblocksOC('89_Contributions');
javascript:toggleblocksOC('89_Modifications');
javascript:toggleblocksOC('89_Previous_Entry_Names');
http://www.mitre.org
Site Maphttps://cwe.mitre.org/sitemap.html
Terms of Usehttps://cwe.mitre.org/about/termsofuse.html
Manage Cookieshttps://cwe.mitre.org/data/definitions/89.html
Cookie Noticehttps://cwe.mitre.org/about/cookie_notice.html
Privacy Policyhttps://cwe.mitre.org/about/privacy_policy.html
https://x.com/CweCapec
https://www.linkedin.com/showcase/cve-cwe-capec
https://bsky.app/profile/cweprogram.bsky.social
https://mastodon.social/@CWE_Program
https://www.youtube.com/channel/UCpY9VIpRmFK4ebD6orssifA
https://cwe.mitre.org/news/podcast.html
https://medium.com/@CWE_CAPEC
Terms of Usehttps://cwe.mitre.org/about/termsofuse.html
U.S. Department of Homeland Securityhttps://www.dhs.gov/
Cybersecurity and Infrastructure Security Agencyhttps://www.dhs.gov/cisa/cybersecurity-division
Homeland Security Systems Engineering and Development Institutehttps://www.dhs.gov/science-and-technology/hssedi
The MITRE Corporationhttp://www.mitre.org/
https://www.dhs.gov/science-and-technology/hssedi
URLs of crawlers that visited me.