Falhas do tipo CWE-89

12.834 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2022-40347CRITICALSQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parametEPSS 5.3%CVE-2024-36517HIGHSQL InjectionEPSS 5.3%CVE-2020-27869HIGHThis vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HEPSS 5.3%CVE-2024-10660MEDIUMESAFENET CDG HookService.java deleteHook sql injectionEPSS 5.3%CVE-2023-4974MEDIUMAcademy LMS GET Parameter filter sql injectionEPSS 5.3%CVE-2021-24791—Header Footer Code Manager < 1.1.14 - Admin+ SQL InjectionsEPSS 5.2%CVE-2024-5586HIGHSQL InjectionEPSS 5.2%CVE-2018-10915HIGHA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between coEPSS 5.2%CVE-2018-16850HIGHpostgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. UsinEPSS 5.1%CVE-2023-0630—Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL InjectionEPSS 5.1%CVE-2022-3141—Translatepress Multilinugal < 2.3.3 - Admin+ SQLiEPSS 5.1%CVE-2024-21775HIGHSQL InjectionEPSS 5.0%CVE-2024-0253HIGHSQL InjectionEPSS 5.0%CVE-2024-29275CRITICALSQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive iEPSS 5.0%CVE-2020-14497—Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-contrEPSS 4.9%CVE-2024-39250CRITICALEfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interfEPSS 4.9%CVE-2023-40056HIGHSolarWinds Platform SQL Injection Remote Code Execution VulnerabilityEPSS 4.8%CVE-2024-1597CRITICALpgjdbc SQL Injection via line comment generationEPSS 4.8%CVE-2022-2467HIGHSourceCodester Garage Management System login.php sql injectionEPSS 4.8%CVE-2016-9488—ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilitiesEPSS 4.7%