← CVE Intelligence

CVE-2023-32754

Thinking Software Efence - SQL injection PUBLISHED

Description (CNA)

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

Affected (CNA)

Vendor / productVersions
Thinking Software / Efenceaffected 1.2.59 DB.ver 36

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.