← Back

Efence

efence

Vendor: Thinkingsoftware • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Thinkingsoftware
1Efence
Jun 17, 2026
Jun 16, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
1Thinkingsoftware
1Efence
Jun 17, 2026
Jan 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.