Fallos del tipo CWE-89

13.402 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2018-25338HIGHZechat 1.5 SQL Injection via hashtag parameterEPSS 0.3%CVE-2025-52823HIGHWordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-89234HIGHWP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' ParameterEPSS 0.3%CVE-2026-24956CRITICALWordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-49033HIGHWordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerabilityEPSS 0.3%CVE-2018-25339HIGHZechat 1.5 SQL Injection via v parameter (time-based blind)EPSS 0.3%CVE-2025-10740MEDIUMURL Shortener Plugin For WordPress <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Link ManipulationEPSS 0.3%CVE-2025-25993MEDIUMSQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."EPSS 0.3%CVE-2025-58881HIGHWordPress New Simple Gallery Plugin <= 8.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-60110HIGHWordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-89232HIGHRecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' ParameterEPSS 0.3%CVE-2026-39179MEDIUMA SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the newPassword paramEPSS 0.3%CVE-2025-56215MEDIUMphpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the pagetitle parameter.EPSS 0.3%CVE-2026-108965MEDIUMSourceCodester Performance Indicator System edit_quantity.php sql injectionEPSS 0.3%CVE-2026-88397MEDIUMApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter.EPSS 0.3%CVE-2025-40886HIGHAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0EPSS 0.3%CVE-2021-47872HIGHSEO Panel < 4.9.0 - 'order_col' Blind SQL InjectionEPSS 0.3%CVE-2026-66770MEDIUMSQL Injection vulnerability in SAP Social IntelligenceEPSS 0.3%CVE-2026-39178MEDIUMA SQL injection vulnerability in SOGo before 5.12.7 allows authenticated users to execute arbitrary SQL statements via the search parameter EPSS 0.3%CVE-2025-50467MEDIUMOpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestEPSS 0.3%