Lucene search
+L

4 matches found

NVD
NVD
•added 2023/06/16 4:15 a.m.•32 views

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS9.9AI score0.01026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/16 12:00 a.m.•38 views

CVE-2023-32754 Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS10AI score0.01026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/16 12:00 a.m.•18 views

CVE-2023-32754 Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS8AI score0.01026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/16 12:00 a.m.•3 views

CVE-2023-32754: Improper Neutralization of Special Elements used in an SQL Command

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database...

9.8CVSS8.3AI score0.01026EPSS
SaveExploits0References2
Rows per page
Query Builder