Falhas do tipo CWE-89

13.617 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2021-4088HIGHBlind SQL injection in DLP ePO extensionEPSS 2.3%CVE-2021-24959—WP Email Users <= 1.7.6 - Subscriber+ SQL InjectionEPSS 2.2%CVE-2024-30490CRITICALWordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerabilityEPSS 2.2%CVE-2024-30498CRITICALWordPress CRM Perks Forms plugin <= 1.1.4 - Unauthenticated SQL Injection vulnerabilityEPSS 2.2%CVE-2024-30502CRITICALWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityEPSS 2.2%CVE-2016-7919HIGHMoodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting tEPSS 2.2%CVE-2024-46907HIGHWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2024-46908HIGHWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2024-46905HIGHWhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation VulnerabilityEPSS 2.2%CVE-2023-50578CRITICALMingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.EPSS 2.2%CVE-2023-49954CRITICALThe CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email addressEPSS 2.2%CVE-2022-34872MEDIUMThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is requirEPSS 2.2%CVE-2017-12710—A SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By submitting a specially crafted parameter, itEPSS 2.2%CVE-2019-10208HIGHA flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x beforEPSS 2.2%CVE-2024-13496HIGHGamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby ParameterEPSS 2.2%CVE-2023-5350MEDIUMSQL Injection in salesagility/suitecrmEPSS 2.2%CVE-2024-1301CRITICALMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 2.2%CVE-2023-22794—A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed tEPSS 2.2%CVE-2024-21791MEDIUMSQL Injection in ADAudit PlusEPSS 2.2%CVE-2024-32843CRITICALAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin pEPSS 2.1%