Weaknesses of type CWE-89

12,837 results

Injeção SQL

Ocorre quando entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O aplicativo executa a consulta alterada, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Example

Um formulário de login que monta a query assim: `SELECT * FROM users WHERE email = '" + emailDoFormulario + "'`. Se o usuário digitar `admin'--`, a query vira `SELECT * FROM users WHERE email = 'admin'--'` e bypassa a validação de senha, autenticando como admin.

How to mitigate

Use prepared statements ou stored procedures com parâmetros vinculados (bind parameters). Em Java use PreparedStatement; em Python use placeholders com psycopg2 ou SQLAlchemy; em qualquer linguagem evite concatenação de strings. Combine com validação de entrada e princípio do menor privilégio no banco de dados.

CVE-2013-10043CRITICALAstium VOIP PBX <= 2.1 SQL Injection File Upload RCEEPSS 2.3%CVE-2019-5151CRITICALAn exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injectiEPSS 2.3%CVE-2024-51211CRITICALSQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is duEPSS 2.3%CVE-2021-4088HIGHBlind SQL injection in DLP ePO extensionEPSS 2.3%CVE-2022-44588CRITICALWordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL InjectionEPSS 2.2%CVE-2021-24959—WP Email Users <= 1.7.6 - Subscriber+ SQL InjectionEPSS 2.2%CVE-2024-30490CRITICALWordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerabilityEPSS 2.2%CVE-2024-30502CRITICALWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityEPSS 2.2%CVE-2024-30498CRITICALWordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerabilityEPSS 2.2%CVE-2016-7919HIGHMoodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting tEPSS 2.2%CVE-2024-46905HIGHWhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2024-36840CRITICALSQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive EPSS 2.2%CVE-2024-46908HIGHWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2024-46907HIGHWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2023-50578CRITICALMingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.EPSS 2.2%CVE-2023-49954CRITICALThe CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email addressEPSS 2.2%CVE-2024-13496HIGHGamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby ParameterEPSS 2.2%CVE-2017-12710—A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, itEPSS 2.2%CVE-2019-10208HIGHA flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x beforEPSS 2.2%CVE-2024-1301CRITICALMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 2.2%