Fallos del tipo CWE-89

12.845 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2024-54960MEDIUMA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the HistoryEPSS 1.4%CVE-2024-10140MEDIUMcode-projects Pharmacy Management System manage_supplier.php sql injectionEPSS 1.4%CVE-2020-36072HIGHSQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.EPSS 1.4%CVE-2022-24815HIGHSQL Injection when creating an application with Reactive SQL backend EPSS 1.4%CVE-2021-31650CRITICALA SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the EPSS 1.4%CVE-2021-24754—MainWP Child Reports < 2.0.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2017-0914—Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component rEPSS 1.4%CVE-2022-32211HIGHA SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password tEPSS 1.4%CVE-2026-28501CRITICALWWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.phpEPSS 1.4%CVE-2021-24458—Popup box < 2.3.4 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24580—Side Menu Lite < 2.2.6 - Authenticated SQL InjectionEPSS 1.4%CVE-2021-24459—Survey Maker < 1.5.6 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24460—Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24461—FAQ Builder < 1.3.6 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24463—Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL InjectionEPSS 1.4%CVE-2021-24506—Slider Hero < 8.2.7 - Contributor+ SQL InjectionEPSS 1.4%CVE-2021-24462—Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24748—Email Before Download < 6.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2021-24829—Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24575—WPSchoolPress < 2.1.10 - Multiple Authenticated SQL InjectionsEPSS 1.4%