Fallos del tipo CWE-89

13.617 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2012-5861—Sinapsi eSolar SQL InjectionEPSS 4.2%CVE-2023-34756CRITICALbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charsetEPSS 4.2%CVE-2023-34753CRITICALbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&acEPSS 4.2%CVE-2023-34755CRITICALbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.EPSS 4.2%CVE-2023-34751CRITICALbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&actiEPSS 4.2%CVE-2023-43373CRITICALHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.phpEPSS 4.2%CVE-2018-5384—Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injectionEPSS 4.2%CVE-2024-3605CRITICALWP Hotel Booking <= 2.1.0 - Unauthenticated SQL InjectionEPSS 4.2%CVE-2017-14851CRITICALA SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the aEPSS 4.1%CVE-2022-44290CRITICALwebTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.EPSS 4.1%CVE-2022-44291CRITICALwebTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.EPSS 4.1%CVE-2023-2130MEDIUMSourceCodester Purchase Order Management System GET Parameter view_details.php sql injectionEPSS 4.1%CVE-2026-23921HIGHBlind, read-only SQL injection in Zabbix API via sortfield parameterEPSS 4.1%CVE-2024-5490HIGHSQL InjectionEPSS 4.0%CVE-2024-36514HIGHSQL InjectionEPSS 4.0%CVE-2020-15616HIGHThis vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923EPSS 4.0%CVE-2020-15620HIGHThis vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923EPSS 4.0%CVE-2020-15624HIGHThis vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923EPSS 4.0%CVE-2022-3158HIGHRockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FEPSS 4.0%CVE-2024-53900CRITICALMongoose before 8.8.3 can improperly use $where in match, leading to search injection.EPSS 4.0%