Falhas do tipo CWE-89

12.814 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2022-31101HIGHSQL Injection in prestashop/blockwishlistEPSS 23.5%CVE-2024-11773CRITICALSQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ruEPSS 23.5%CVE-2024-43917CRITICALWordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerabilityEPSS 23.0%CVE-2023-5591HIGHSQL Injection in librenms/librenmsEPSS 22.2%CVE-2017-20029HIGHPHPList Edit Subscription index.php sql injectionEPSS 21.0%CVE-2022-40032CRITICALSQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackerEPSS 20.7%CVE-2022-43775CRITICALThe HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution onEPSS 20.6%CVE-2024-8191HIGHSQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attackerEPSS 20.3%CVE-2024-32480HIGHLibreNMS's Time-Based Blind SQL injection leads to database extractionEPSS 20.3%CVE-2024-37148HIGHGLPI allows account takeover via SQL Injection in AJAX scriptsEPSS 20.2%CVE-2024-39309CRITICALZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass VulnerabilityEPSS 20.2%CVE-2021-21924HIGHA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilitieEPSS 20.2%CVE-2022-1556—StaffList < 3.1.5 - Admin+ SQLiEPSS 20.1%CVE-2021-38390—A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5EPSS 19.8%CVE-2023-24775CRITICALFunadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.EPSS 19.8%CVE-2024-6457CRITICALHUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL InjectionEPSS 19.7%CVE-2022-2086MEDIUMSourceCodester Bank Management System login.php sql injectionEPSS 19.6%CVE-2025-64459CRITICALPotential SQL injection via _connector keyword argument in QuerySet and Q objectsEPSS 19.4%CVE-2022-46887CRITICALMultiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] EPSS 19.4%CVE-2022-1378CRITICALDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This EPSS 19.3%