Falhas do tipo CWE-89

13.617 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2026-2413HIGHAlly – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL PathEPSS 2.4%CVE-2021-33729—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmwaEPSS 2.4%CVE-2024-6265CRITICALUsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'EPSS 2.4%CVE-2025-5287HIGHLikes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL InjectionEPSS 2.4%CVE-2025-52472CRITICALXWiki Platform vulnerable to HQL injection via wiki and space search REST APIEPSS 2.4%CVE-2023-23490HIGHThe Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parametEPSS 2.4%CVE-2022-31197HIGHSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcEPSS 2.4%CVE-2020-13567HIGHMultiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker canEPSS 2.3%CVE-2024-36597HIGHAegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.EPSS 2.3%CVE-2022-45805HIGHWordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL InjectionEPSS 2.3%CVE-2022-46764CRITICALA SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to executEPSS 2.3%CVE-2016-8640—A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any tableEPSS 2.3%CVE-2025-67644HIGHLangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list methodEPSS 2.3%CVE-2020-24400HIGHSQL injection allows arbitrary read from databaseEPSS 2.3%CVE-2013-10044HIGHOpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCEEPSS 2.3%CVE-2023-49330HIGHZoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.EPSS 2.3%CVE-2020-36857HIGHNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageEPSS 2.3%CVE-2019-5151CRITICALAn exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injectiEPSS 2.3%CVE-2024-36840CRITICALSQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive EPSS 2.3%CVE-2024-51211CRITICALSQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifically in the resetuserinfo.php file. The vulnerability is duEPSS 2.3%