Falhas do tipo CWE-89

12.845 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2024-54960MEDIUMA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the HistoryEPSS 1.4%CVE-2024-10140MEDIUMcode-projects Pharmacy Management System manage_supplier.php sql injectionEPSS 1.4%CVE-2020-36072HIGHSQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.EPSS 1.4%CVE-2022-24815HIGHSQL Injection when creating an application with Reactive SQL backend EPSS 1.4%CVE-2021-31650CRITICALA SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the EPSS 1.4%CVE-2021-24754—MainWP Child Reports < 2.0.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2017-0914—Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component rEPSS 1.4%CVE-2022-32211HIGHA SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password tEPSS 1.4%CVE-2026-28501CRITICALWWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.phpEPSS 1.4%CVE-2021-24458—Popup box < 2.3.4 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24580—Side Menu Lite < 2.2.6 - Authenticated SQL InjectionEPSS 1.4%CVE-2021-24459—Survey Maker < 1.5.6 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24460—Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24461—FAQ Builder < 1.3.6 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24463—Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL InjectionEPSS 1.4%CVE-2021-24506—Slider Hero < 8.2.7 - Contributor+ SQL InjectionEPSS 1.4%CVE-2021-24462—Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2021-24748—Email Before Download < 6.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2021-24829—Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24575—WPSchoolPress < 2.1.10 - Multiple Authenticated SQL InjectionsEPSS 1.4%