Efence (Thinkingsoftware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-06-16. Vendor: Thinkingsoftware.

CVEs of Efence

• CVE-2023-32754 - CVSS 9.8 (critical), 2023-06-16: Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to…
• CVE-2023-22900 - CVSS 9.8 (critical), 2023-01-31: Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL…