Fallos del tipo CWE-89

12.845 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2021-24457—Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2018-0120—A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQLEPSS 1.4%CVE-2019-5111HIGHExploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameteEPSS 1.4%CVE-2026-2416HIGHGeo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' ParameterEPSS 1.4%CVE-2022-24752CRITICALSQL Injection through sorting parameters in SyliusGridBundleEPSS 1.4%CVE-2021-1225MEDIUMCisco SD-WAN vManage SQL Injection VulnerabilitiesEPSS 1.4%CVE-2005-4349MEDIUMSQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commandsEPSS 1.4%CVE-2019-5114HIGHAn exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SEPSS 1.4%CVE-2022-24827HIGHSQL Injection in elide-datastore-aggregationEPSS 1.4%CVE-2024-7385CRITICALWordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL InjectionEPSS 1.4%CVE-2026-27876CRITICALRCE on Grafana via sqlExpressionsEPSS 1.4%CVE-2026-56292CRITICALJoomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1EPSS 1.4%CVE-2022-32964CRITICALITPison OMICARD EDM - SQL InjectionEPSS 1.4%CVE-2023-24163CRITICALSQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.EPSS 1.4%CVE-2021-21915HIGHAn exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-craftedEPSS 1.4%CVE-2021-21936HIGHA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability aEPSS 1.4%CVE-2021-21916HIGHAn exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-craftedEPSS 1.4%CVE-2021-24769—Permalink Manager Lite < 2.2.13.1 - Admin+ SQL InjectionEPSS 1.4%CVE-2021-21917HIGHAn exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-craftedEPSS 1.4%CVE-2024-54960MEDIUMA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the HistoryEPSS 1.4%