EUVD-2026-77360
GHSA-h9qf-p2h6-6ph9
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable unauthenticated SQLi yields database read only; no integrity or availability impact stated.
Primary rating from Vendor (twcert).
CVSS VectorVendor: twcert
Lifecycle Timeline
2DescriptionCVE.org
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
AnalysisAI
Unauthenticated SQL injection in EFence (Thinking Software Technology) exposes full database read access to remote attackers without credentials. The flaw resides in the web-facing component of the EFence product, where attacker-controlled input is passed unsanitized into SQL queries, enabling arbitrary SELECT operations against the underlying database. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required for exploitation: the SQL injection endpoint is reachable over the network without authentication and without user interaction, matching the CVSS 4.0 base metrics AV:N/AC:L/AT:N/PR:N/UI:N. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 accurately reflects the principal risk: network-accessible, zero-prerequisite SQL injection yielding high-confidence database read access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the TWCERT advisories at https://www.twcert.org.tw/tw/cp-132-11202-48c1b-1.html and https://www.twcert.org.tw/en/cp-139-11203-26db2-2.html for vendor-released patch details; a specific patched version number is not extractable from the available intelligence and should be confirmed directly with Thinking Software Technology. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, contact Thinking Software Technology to confirm patch timeline and assess whether your EFence instance is internet-accessible or reachable from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Thinking Software Efence login function has insufficient validation for user input. Rated critical severity (CVSS 9.8),
Efence login function has insufficient validation for user input. Rated critical severity (CVSS 9.8), this vulnerability
Unauthenticated arbitrary file upload in Thinking Software Technology's EFence (versions up to and including 1.2.66, DB
SQL injection in Thinking Software Technology's Efence (versions ≤ 1.2.66 DB Ver:56) exposes full database contents to u
Arbitrary file upload in EFence (Thinking Software Technology) versions 1.2.66 and earlier allows authenticated remote a
Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today