Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Thinking Software Efence - SQL injection
Vulnerability Description
Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Thinking Software Technology Efence SQL注入漏洞
Vulnerability Description
Thinking Software Technology Efence是中国思考软体科技（Thinking Software Technology）公司的一款行动设备管理解决方案。 Thinking Software Technology Efence 存在SQL注入漏洞，该漏洞源于登录功能未对使用者输入的参数进行验证。
CVSS Information
N/A
Vulnerability Type
N/A