Weaknesses of type CWE-89

13,605 results

Injeção SQL

Ocorre quando entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O aplicativo executa a consulta alterada, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Example

Um formulário de login que monta a query assim: `SELECT * FROM users WHERE email = '" + emailDoFormulario + "'`. Se o usuário digitar `admin'--`, a query vira `SELECT * FROM users WHERE email = 'admin'--'` e bypassa a validação de senha, autenticando como admin.

How to mitigate

Use prepared statements ou stored procedures com parâmetros vinculados (bind parameters). Em Java use PreparedStatement; em Python use placeholders com psycopg2 ou SQLAlchemy; em qualquer linguagem evite concatenação de strings. Combine com validação de entrada e princípio do menor privilégio no banco de dados.

CVE-2020-15160—Blind SQL Injection in PrestaShopEPSS 10.8%CVE-2025-50979HIGHNodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter iEPSS 10.6%CVE-2025-7624CRITICALAn SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to rEPSS 10.5%CVE-2023-29809CRITICALSQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafEPSS 10.5%CVE-2022-2135HIGHAdvantech iViewEPSS 10.5%CVE-2022-1692—CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLiEPSS 10.4%CVE-2024-4443CRITICALBusiness Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields ParameterEPSS 10.4%CVE-2022-0592—MapSVG < 6.2.20 - Unauthenticated SQLiEPSS 10.2%CVE-2024-4295CRITICALEmail Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashEPSS 10.2%CVE-2021-33177—The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the maliciouEPSS 10.1%CVE-2024-36680HIGHIn the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookCoEPSS 10.1%CVE-2022-0784—Title Experiments Free < 9.0.1 - Unauthenticated SQLiEPSS 10.1%CVE-2024-50387CRITICALSMB ServiceEPSS 10.0%CVE-2023-39336CRITICALAn unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the intEPSS 10.0%CVE-2022-31056CRITICALSQL injection with _actor parameter in GLPIEPSS 9.9%CVE-2022-0948—Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLiEPSS 9.9%CVE-2017-17417—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. AuthentEPSS 9.8%CVE-2022-22280—Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWaEPSS 9.8%CVE-2023-26876HIGHSQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id paEPSS 9.7%CVE-2021-43408MEDIUMDuplicate Post WordPress Plugin SQL Injection VulnerabilityEPSS 9.7%