Fallos del tipo CWE-89

12.846 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2016-10553—sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server iEPSS 1.3%CVE-2024-3690MEDIUMPHPGurukul Small CRM Change Password sql injectionEPSS 1.3%CVE-2023-45657HIGHWordPress Nexter Theme <= 2.0.3 is vulnerable to SQL InjectionEPSS 1.3%CVE-2022-2269—Website File Changes Monitor < 1.8.3 - Admin+ SQLiEPSS 1.3%CVE-2022-42744CRITICALCandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the apEPSS 1.3%CVE-2022-45889HIGHPlanet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the databaEPSS 1.3%CVE-2022-1800—Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24877—MainWP Child < 4.1.8 - Admin+ SQL InjectionEPSS 1.3%CVE-2017-20127HIGHKB Login Authentication Script sql injectionEPSS 1.3%CVE-2025-22214MEDIUMLandray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.EPSS 1.3%CVE-2022-40877CRITICALExam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.EPSS 1.3%CVE-2022-0267—AdRotate < 5.8.22 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-4208—ExportFeed <= 2.0.1.0 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24778—Tradetracker-Store < 4.6.60 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24861—Quotes Collection <= 2.5.2 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-32790MEDIUMBlind SQL Injection possible via Authenticated Web-hook Search API EndpointEPSS 1.3%CVE-2025-27240HIGHSecondary-order SQL injection in Zabbix Server when deleting an autoregistered hostEPSS 1.3%CVE-2020-10617—There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access toEPSS 1.3%CVE-2020-12034—Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6EPSS 1.3%CVE-2017-9443HIGHBigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables object in manifest.json iEPSS 1.3%