Falhas do tipo CWE-89

12.839 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2023-22794—A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed tEPSS 2.2%CVE-2024-21791MEDIUMSQL Injection in ADAudit PlusEPSS 2.2%CVE-2024-32843CRITICALAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin pEPSS 2.1%CVE-2024-32846CRITICALAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin pEPSS 2.1%CVE-2024-32842CRITICALAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin pEPSS 2.1%CVE-2024-39843MEDIUMA SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user EPSS 2.1%CVE-2020-36857HIGHNagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageEPSS 2.1%CVE-2022-34872MEDIUMThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is requirEPSS 2.1%CVE-2021-36880HIGHWordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerabilityEPSS 2.1%CVE-2024-6814HIGHNETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution VulnerabilityEPSS 2.1%CVE-2022-31197HIGHSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcEPSS 2.1%CVE-2021-33701CRITICALDMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1EPSS 2.1%CVE-2023-39359HIGHAuthenticated SQL injection vulnerability in graphs.php in CactiEPSS 2.1%CVE-2022-46764CRITICALA SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to executEPSS 2.1%CVE-2023-39358HIGHAuthenticated SQL injection vulnerability in reports_user.php in CactiEPSS 2.0%CVE-2023-50839CRITICALWordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL InjectionEPSS 2.0%CVE-2014-2376—Ecava IntegraXor SCADA Server SQL InjectionEPSS 2.0%CVE-2022-0254—Zero Spam < 5.2.11 - Admin+ SQL InjectionEPSS 2.0%CVE-2025-34038HIGHWeaver E-cology SQL InjectionEPSS 2.0%CVE-2019-5454—SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiringEPSS 2.0%