Falhas do tipo CWE-89

13.605 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2023-4165MEDIUMTongda OA delete_seal.php sql injectionEPSS 12.4%CVE-2020-26248MEDIUMBlind SQL injection during the CommentGrade processEPSS 12.4%CVE-2023-4166MEDIUMTongda OA delete_log.php sql injectionEPSS 12.3%CVE-2024-13973MEDIUMA post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to adminisEPSS 12.3%CVE-2021-22654—Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose inforEPSS 12.2%CVE-2020-5724—The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthEPSS 12.2%CVE-2024-8529CRITICALLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'EPSS 12.1%CVE-2024-4257MEDIUMBlueNet Technology Clinical Browsing System deleteStudy.php sql injectionEPSS 12.1%CVE-2021-24915—Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address DisclosureEPSS 12.0%CVE-2024-52874HIGHIn Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.EPSS 11.9%CVE-2022-34324HIGHMultiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add EPSS 11.9%CVE-2024-6028CRITICALQuiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' ParameterEPSS 11.8%CVE-2016-6566—The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end databaseEPSS 11.6%CVE-2022-0817—BadgeOS <= 3.7.0 - Unauthenticated SQLiEPSS 11.6%CVE-2023-23489CRITICALThe Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in thEPSS 11.3%CVE-2025-2126MEDIUMJoomlaUX JUX Real Estate GET Parameter realties sql injectionEPSS 11.2%CVE-2024-1061HIGHThe 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameEPSS 11.1%CVE-2021-24507—Astra Pro Addon < 3.5.2 - Unauthenticated SQL InjectionEPSS 11.0%CVE-2024-6497HIGHSEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url ParameterEPSS 11.0%CVE-2022-0760—Simple Link Directory < 7.7.2 - Unauthenticated SQL injectionEPSS 10.8%