Falhas do tipo CWE-89

13.396 resultados

Injeção de SQL

Fraqueza onde entrada do usuário é concatenada diretamente em comandos SQL sem validação ou sanitização, permitindo que um atacante insira código SQL malicioso. O banco de dados executa comandos não intencionais, comprometendo confidencialidade, integridade e disponibilidade dos dados.

Exemplo

Um formulário de login concatena o usuário digitado direto na query: `SELECT * FROM users WHERE login = '` + input + `'`. Se o usuário digita `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE login = 'admin' OR '1'='1'`, retornando todos os usuários e burlando autenticação.

Como mitigar

Use prepared statements (consultas parametrizadas) com placeholders, nunca concatene entrada do usuário. Valide e restrinja entrada (whitelist), aplique princípio do menor privilégio na conta do BD e use WAF como camada adicional.

CVE-2025-67081MEDIUMAn SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker wiEPSS 0.3%CVE-2026-20235MEDIUMCisco Identity Services Engine Information Disclosure VulnerabilityEPSS 0.3%CVE-2025-25877LOWA vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attaEPSS 0.3%CVE-2025-65135CRITICALIn manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsEPSS 0.3%CVE-2025-60797MEDIUMphpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-sEPSS 0.3%CVE-2025-12743MEDIUMSQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL DatabaseEPSS 0.3%CVE-2025-25878LOWA vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attackEPSS 0.3%CVE-2026-110179MEDIUMaffiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby ParameterEPSS 0.3%CVE-2026-6093MEDIUMCorteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escapingEPSS 0.3%CVE-2018-25380HIGHJoomla Component eXtroForms 2.1.5 SQL Injection via filter parametersEPSS 0.3%CVE-2018-25381HIGHJoomla Responsive Portfolio 1.6.1 SQL Injection via filter parametersEPSS 0.3%CVE-2026-11334MEDIUMtittuvarghese CollegeManagementSystem fetch.php sql injectionEPSS 0.3%CVE-2026-108828LOWZen Cart Admin Panel configuration.php eval sql injectionEPSS 0.3%CVE-2025-10289MEDIUMFilter & Grids <= 3.2.0 - Unauthenticated SQL InjectionEPSS 0.3%CVE-2025-49870HIGHWordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-7826MEDIUMTestimonial <= 2.3 - Authenticated (Contributor+) SQL InjectionEPSS 0.3%CVE-2026-22332CRITICALWordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-22336CRITICALWordPress Directorist Booking plugin < 3.0.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-30633CRITICALWordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-112017HIGHJeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline BypassEPSS 0.3%