Thinking Software Technology vulnerabilities
We track 5 vulnerabilities in Thinking Software Technology products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest Thinking Software Technology vulnerabilities
- 7.5 High severity
EFence: Improper Neutralization of Special Elements used in an SQL Command
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
- 8.8 High severity
Efence: Unrestricted Upload of File with Dangerous Type
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 8.2 High severity
Efence: Improper Neutralization of Special Elements used in an SQL Command
Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.
- 9.8 Critical severity
EFence: Unrestricted Upload of File with Dangerous Type
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 9.8 Critical severity
Efence: Improper Neutralization of Special Elements used in an SQL Command
Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.