Efence vulnerabilities

1 known vulnerability in Efence from Thinking Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Efence: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-32754Jun 16, 2023Thinking SoftwareEPSS 1.03%

  Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.