Sql injection

2023-01-3108:15:00

PRIOn knowledge base

www.prio-n.com

input validation

sql injection

remote attacker

database access

database modification

database deletion

nvd

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

CPENameOperatorVersion
efenceeq1.2.58 db28

CPE	Name	Operator	Version
	efence	eq	1.2.58 db28

References

www.twcert.org.tw/tw/cp-132-6885-d679e-1.html