Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-89180

Thinking Software Technology｜EFence - SQL Injection

EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence
CVE-2026-80235

Thinking Software Technology｜EFence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence
CVE-2026-80236

Thinking Software Technology｜Efence - SQL Injection

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence
CVE-2026-80237

Thinking Software Technology｜Efence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence
CVE-2023-22900

Thinking Software Technology Co., Ltd. Efence - SQL Injection

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence
CVE-2023-32754

Thinking Software Efence - SQL injection

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Thinkingsoftware
Products
Efence