Thinking Software vulnerabilities
We track 1 vulnerability in Thinking Software products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Thinking Software vulnerabilities
- 9.8 Critical severity
Efence: Improper Neutralization of Special Elements used in an SQL Command
Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.