Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Thinking Software Technology Co., Ltd. Efence - SQL Injection
Vulnerability Description
Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Efence SQL注入漏洞
Vulnerability Description
Thinking Software Technology Efence是中国思考软体科技（Thinking Software Technology）公司的一款行动设备管理解决方案。 Efence 1.2.58 DB.ver 28存在SQL注入漏洞，该漏洞源于在登录功能对用户输入的验证不足。攻击者利用该漏洞可以注入任意SQL命令以访问、修改或删除数据库。
CVSS Information
N/A
Vulnerability Type
N/A