Fallos del tipo CWE-89

13.406 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2026-103253HIGHn8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop TableEPSS 0.2%CVE-2026-54790MEDIUMInvoicePlane: Second-order SQL injection through the unvalidated custom_field_table field in the Custom Fields moduleEPSS 0.2%CVE-2026-104122MEDIUMUkr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term NameEPSS 0.2%CVE-2026-106097MEDIUMCode Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)EPSS 0.2%CVE-2026-91024MEDIUMBooking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)EPSS 0.2%CVE-2026-17509MEDIUMWPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’EPSS 0.2%CVE-2026-91074MEDIUMBSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode AttributeEPSS 0.2%CVE-2026-104667MEDIUMAnimated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter OrderEPSS 0.2%CVE-2025-15655HIGHWordPress School Management plugin <= 93.2.0 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-104953MEDIUMMPG < 4.2.3 - Editor+ SQLi via Project ImportEPSS 0.2%CVE-2026-5048MEDIUMIn Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authEPSS 0.2%CVE-2026-33723HIGHAVideo Vulnerable to SQL Injection in Subscribe Endpoint via Unsanitized user_id Parameter in subscribe.phpEPSS 0.2%CVE-2025-14568MEDIUMhaxxorsid Stock-Management-System User.php sql injectionEPSS 0.2%CVE-2025-61464MEDIUMgnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the search_table in bbs/search.php.EPSS 0.2%CVE-2025-14259MEDIUMJihai Jshop MiniProgram Mall System api.html sql injectionEPSS 0.2%CVE-2026-96330CRITICALWordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-96328CRITICALWordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-0843MEDIUMjiujiujia/victor123/wxw850227 jjjfood/jjjshop_food index sql injectionEPSS 0.2%CVE-2025-58780HIGHindex.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier becausEPSS 0.2%CVE-2025-14780MEDIUMXiongwei Smart Catering Cloud Platform dish_trade_detail_get sql injectionEPSS 0.2%