Weaknesses of type CWE-74

4,784 results

Injeção de código

É quando uma aplicação incorpora dados não validados em um comando ou consulta que será interpretado como código. O atacante consegue injetar instruções maliciosas que são executadas com os privilégios da aplicação, como SQL, shell ou XML.

Example

Um formulário de login que monta uma query SQL concatenando diretamente a entrada do usuário: `SELECT * FROM usuarios WHERE email = '` + email_usuario + `'`. Um atacante digita `' OR '1'='1` e consegue bypassar a autenticação.

How to mitigate

Use prepared statements ou parameterized queries (bind variables), que separam dados de código. Valide e sanitize todas as entradas contra regras rígidas de whitelist, e aplique o princípio do menor privilégio nas contas de banco de dados e processos.

CVE-2025-7157MEDIUMcode-projects Online Note Sharing login.php sql injectionEPSS 0.5%CVE-2025-7191MEDIUMcode-projects Student Enrollment System login.php sql injectionEPSS 0.5%CVE-2025-6955MEDIUMCampcodes Employee Management System aprocess.php sql injectionEPSS 0.5%CVE-2025-7135MEDIUMCampcodes Online Recruitment Management System ajax.php sql injectionEPSS 0.5%CVE-2025-6888MEDIUMPHPGurukul Teachers Record Management System changeimage.php sql injectionEPSS 0.5%CVE-2025-7136MEDIUMCampcodes Online Recruitment Management System view_vacancy.php sql injectionEPSS 0.5%CVE-2025-7211MEDIUMcode-projects LifeStyle Store cart_add.php sql injectionEPSS 0.5%CVE-2025-6903MEDIUMcode-projects Car Rental System approve.php sql injectionEPSS 0.5%CVE-2025-6906MEDIUMcode-projects Car Rental System login.php sql injectionEPSS 0.5%CVE-2025-8134MEDIUMPHPGurukul BP Monitoring Management System bwdates-report-result.php sql injectionEPSS 0.5%CVE-2025-7198MEDIUMcode-projects Jonnys Liquor admin-area.php sql injectionEPSS 0.5%CVE-2025-7183MEDIUMCampcodes Sales and Inventory System customer_account.php sql injectionEPSS 0.5%CVE-2025-6901MEDIUMcode-projects Inventory Management System removeUser.php sql injectionEPSS 0.5%CVE-2025-7184MEDIUMcode-projects Library System books.php sql injectionEPSS 0.5%CVE-2025-6889MEDIUMcode-projects Movie Ticketing System logIn.php sql injectionEPSS 0.5%CVE-2025-7197MEDIUMcode-projects Jonnys Liquor delete-row.php sql injectionEPSS 0.5%CVE-2025-7927MEDIUMPHPGurukul Online Banquet Booking System view-user-queries.php sql injectionEPSS 0.5%CVE-2025-7170MEDIUMcode-projects Crime Reporting System registration.php sql injectionEPSS 0.5%CVE-2025-6885MEDIUMPHPGurukul Teachers Record Management System edit-teacher-detail.php sql injectionEPSS 0.5%CVE-2025-7185MEDIUMcode-projects Library System approve.php sql injectionEPSS 0.5%