Fallos del tipo CWE-89

13.391 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2025-29189HIGHFlowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.EPSS 0.3%CVE-2026-7591MEDIUMTimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injectionEPSS 0.3%CVE-2026-7744MEDIUMCodeAstro Online Classroom addnewstudent sql injectionEPSS 0.3%CVE-2026-7392MEDIUMSourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injectionEPSS 0.3%CVE-2026-15502MEDIUMAojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injectionEPSS 0.3%CVE-2026-2235HIGHHGiga｜C&Cm@il - SQL InjectionEPSS 0.3%CVE-2026-7741MEDIUMCodeAstro Online Classroom studentlogin sql injectionEPSS 0.3%CVE-2026-7783MEDIUMCodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injectionEPSS 0.3%CVE-2026-5579MEDIUMCodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injectionEPSS 0.3%CVE-2026-4966MEDIUMitsourcecode Free Hotel Reservation System index.php sql injectionEPSS 0.3%CVE-2025-8977MEDIUMSimple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionalityEPSS 0.3%CVE-2025-9463MEDIUMPayments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by ParameterEPSS 0.3%CVE-2025-9451MEDIUMSmartcat Translator for WPML <= 3.1.72 - Authenticated (Author+) SQL Injection via orderby ParameterEPSS 0.3%CVE-2024-25513HIGHRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_downEPSS 0.3%CVE-2025-6883MEDIUMcode-projects Staff Audit System update_index.php sql injectionEPSS 0.3%CVE-2026-64880HIGHBlind SQL InjectionEPSS 0.3%CVE-2025-11165CRITICALA sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privilegEPSS 0.3%CVE-2026-25418HIGHWordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-56381MEDIUMERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint viaEPSS 0.3%CVE-2025-56380MEDIUMFrappe Framework v15.72.4 was discovered to contain a SQL injection vulnerability via the fieldname parameter in the frappe.client.get_valueEPSS 0.3%