Skip to content
OpenAdvisories

Product · Thinking Software Technology

Efence

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-80235

    Thinking Software Technology｜EFence - Arbitrary File Upload

    EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

    Thinking Software Technology Efence
  • Critical 9.8
    CVE-2023-32754

    Thinking Software Efence - SQL injection

    Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

    Thinking Software Technology Efence
  • Critical 9.8
    CVE-2023-22900

    Thinking Software Technology Co., Ltd. Efence - SQL Injection

    Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

    Thinking Software Technology Efence