Sql injection

2023-06-1604:15:00

PRIOn knowledge base

www.prio-n.com

security vulnerability

remote attacker

sql injection

database access

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

CPENameOperatorVersion
efenceeq1.2.59 db-36

CPE	Name	Operator	Version
	efence	eq	1.2.59 db-36

References

www.twcert.org.tw/tw/cp-132-7161-3e7c9-1.html