cbcvebase.

Thinking Software Efence vulnerabilities

1 known vulnerability affecting thinking_software/efence.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-32754P2CRITICALCVSS 9.8v1.2.59 DB.ver 362023-06-16
CVE-2023-32754 [CRITICAL] CWE-89 CVE-2023-32754: Thinking Software Efence login function has insufficient validation for user input. An unauthenticat Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
nvd
Thinking Software Efence vulnerabilities | cvebase