Falhas do tipo CWE-89

13.178 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2024-41802HIGHXibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data ImportEPSS 0.5%CVE-2024-31507HIGHSourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php.EPSS 0.5%CVE-2026-16532CRITICALLink Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission FormEPSS 0.5%CVE-2026-12713CRITICALWPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_numberEPSS 0.5%CVE-2026-12965CRITICALSuper Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_trackingEPSS 0.5%CVE-2026-18473CRITICALWP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' ParameterEPSS 0.5%CVE-2019-25516HIGHJettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via gallery.phpEPSS 0.5%CVE-2026-15360CRITICALAjax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_argsEPSS 0.5%CVE-2023-0673MEDIUMSourceCodester Online Eyewear Shop sql injectionEPSS 0.5%CVE-2026-27832HIGHGroup-Office Has Authenticated SQL Injection in advancedQueryData.comparatorEPSS 0.5%CVE-2026-33153HIGHTandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control LogicEPSS 0.5%CVE-2024-4743HIGHLifterLMS – WordPress LMS Plugin for eLearning <= 7.6.2 - Authenticated (Contributor+) SQL Injection via ShortcodeEPSS 0.5%CVE-2024-57151MEDIUMSQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.phpEPSS 0.5%CVE-2024-3200CRITICALwpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL InjectionEPSS 0.5%CVE-2025-1929HIGHSQLi in RiskTurk's Treasury Management SoftwareEPSS 0.5%CVE-2026-34100HIGHGuardian Language-System SQL Injection via id Parameter in media.phpEPSS 0.5%CVE-2026-41143HIGHYesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()EPSS 0.5%CVE-2026-34105HIGHGuardian Language-System SQL Injection via id Parameter in translate_text.phpEPSS 0.5%CVE-2026-34102HIGHGuardian Language-System SQL Injection via id Parameter in job_info_get.phpEPSS 0.5%CVE-2026-1124MEDIUMYonyou KSOA HTTP GET Parameter work_report.jsp sql injectionEPSS 0.5%