Fallos del tipo CWE-89

12.877 resultados

Injeção de SQL

Ocorre quando dados fornecidos por um usuário são incorporados diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante modifique a lógica da consulta. O risco é grave: exposição de dados sensíveis, modificação ou deleção de registros, e até comprometimento do servidor de banco de dados.

Ejemplo

Um formulário de login que constrói a consulta como `SELECT * FROM users WHERE login = '` + entrada_do_usuario + `'` permite que alguém digite `admin' --` e contorne a verificação de senha, ou `' OR '1'='1` para listar todos os usuários.

Cómo mitigar

Use prepared statements ou stored procedures com parâmetros vinculados (nunca concatenação de strings). Se necessário filtrar, aplique whitelist rigorosa e escape adequado para o banco de dados específico. Implemente validação de entrada e princípio do menor privilégio na conta do banco.

CVE-2022-47860CRITICALLead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.EPSS 0.9%CVE-2024-1793HIGHAWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL InjectionEPSS 0.9%CVE-2023-24200CRITICALRaffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.EPSS 0.9%CVE-2023-24199CRITICALRaffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.EPSS 0.9%CVE-2021-24928—Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL InjectionEPSS 0.9%CVE-2022-41530HIGHOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.EPSS 0.9%CVE-2024-48580CRITICALSQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email EPSS 0.9%CVE-2024-24811CRITICALProducts.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query executionEPSS 0.9%CVE-2022-41532HIGHOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.EPSS 0.9%CVE-2022-41407HIGHOnline Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.EPSS 0.9%CVE-2021-36898HIGHWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityEPSS 0.9%CVE-2022-2666MEDIUMSourceCodester Loan Management System login.php sql injectionEPSS 0.9%CVE-2024-11663MEDIUMCodezips E-Commerce Site search.php sql injectionEPSS 0.9%CVE-2022-50694HIGHSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username ParameterEPSS 0.9%CVE-2025-29905HIGHA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injEPSS 0.9%CVE-2022-29410HIGHWordPress Hermit 音乐播放器 plugin <= 3.1.6 - Authenticated SQL Injection (SQLi) vulnerabilityEPSS 0.9%CVE-2020-21119CRITICALSQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gaiEPSS 0.9%CVE-2024-57636HIGHAn issue in the itc_sample_row_check component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) vEPSS 0.9%CVE-2006-5738HIGHMultiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands viEPSS 0.9%CVE-2021-26633HIGHMaxboard SQL injection and LFI vulnerabilityEPSS 0.9%