Falhas do tipo CWE-89

13.605 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2020-15160—Blind SQL Injection in PrestaShopEPSS 10.8%CVE-2025-50979HIGHNodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The search query parameter iEPSS 10.6%CVE-2025-7624CRITICALAn SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to rEPSS 10.5%CVE-2023-29809CRITICALSQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafEPSS 10.5%CVE-2022-2135HIGHAdvantech iViewEPSS 10.5%CVE-2022-1692—CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLiEPSS 10.4%CVE-2024-4443CRITICALBusiness Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields ParameterEPSS 10.4%CVE-2022-0592—MapSVG < 6.2.20 - Unauthenticated SQLiEPSS 10.2%CVE-2024-4295CRITICALEmail Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashEPSS 10.2%CVE-2021-33177—The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the maliciouEPSS 10.1%CVE-2024-36680HIGHIn the module "Facebook" (pkfacebook) <=1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookCoEPSS 10.1%CVE-2022-0784—Title Experiments Free < 9.0.1 - Unauthenticated SQLiEPSS 10.1%CVE-2024-50387CRITICALSMB ServiceEPSS 10.0%CVE-2023-39336CRITICALAn unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the intEPSS 10.0%CVE-2022-31056CRITICALSQL injection with _actor parameter in GLPIEPSS 9.9%CVE-2022-0948—Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLiEPSS 9.9%CVE-2017-17417—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. AuthentEPSS 9.8%CVE-2022-22280—Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWaEPSS 9.8%CVE-2023-26876HIGHSQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id paEPSS 9.7%CVE-2021-43408MEDIUMDuplicate Post WordPress Plugin SQL Injection VulnerabilityEPSS 9.7%