Fallos del tipo CWE-89

12.817 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2020-26248MEDIUMBlind SQL injection during the CommentGrade processEPSS 12.4%CVE-2023-4166MEDIUMTongda OA delete_log.php sql injectionEPSS 12.3%CVE-2021-22654—Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose inforEPSS 12.2%CVE-2020-5724—The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthEPSS 12.2%CVE-2024-4257MEDIUMBlueNet Technology Clinical Browsing System deleteStudy.php sql injectionEPSS 12.1%CVE-2021-24915—Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address DisclosureEPSS 12.0%CVE-2022-34324HIGHMultiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add EPSS 11.9%CVE-2026-9586CRITICALUnauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBEPSS 11.8%KEVCVE-2024-8529CRITICALLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'EPSS 11.8%CVE-2024-6028CRITICALQuiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' ParameterEPSS 11.8%CVE-2016-6566—The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end databaseEPSS 11.6%CVE-2022-0817—BadgeOS <= 3.7.0 - Unauthenticated SQLiEPSS 11.6%CVE-2025-2126MEDIUMJoomlaUX JUX Real Estate GET Parameter realties sql injectionEPSS 11.2%CVE-2024-1061HIGHThe 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameEPSS 11.2%CVE-2023-23489CRITICALThe Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in thEPSS 11.2%CVE-2021-24507—Astra Pro Addon < 3.5.2 - Unauthenticated SQL InjectionEPSS 11.0%CVE-2024-6497HIGHSEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url ParameterEPSS 11.0%CVE-2022-0760—Simple Link Directory < 7.7.2 - Unauthenticated SQL injectionEPSS 10.8%CVE-2020-15160—Blind SQL Injection in PrestaShopEPSS 10.8%CVE-2022-1692—CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLiEPSS 10.6%