Thinking Software Technology
Monthly
Unauthenticated SQL injection in EFence (Thinking Software Technology) exposes full database read access to remote attackers without credentials. The flaw resides in the web-facing component of the EFence product, where attacker-controlled input is passed unsanitized into SQL queries, enabling arbitrary SELECT operations against the underlying database. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the trivial exploitation conditions (no authentication, no user interaction, network-accessible) make it a high-priority remediation target for any deployment.
Arbitrary file upload in EFence (Thinking Software Technology) versions 1.2.66 and earlier allows authenticated remote attackers to upload web shell backdoors and achieve full arbitrary code execution on the underlying server. The CVSS 4.0 score of 8.7 reflects network-accessible exploitation requiring only low-privilege credentials, with confirmed total technical impact per SSVC. No public exploit has been identified at time of analysis and SSVC rates current exploitation as none, though the Taiwan CERT (TWCERT) has published advisories indicating confirmed vendor awareness.
SQL injection in Thinking Software Technology's Efence (versions ≤ 1.2.66 DB Ver:56) exposes full database contents to unauthenticated remote attackers via the file upload functionality. The CVSS 4.0 score of 8.8 with PR:N and AV:N confirms no credentials are required, and SSVC rates the attack as automatable. No public exploit code or CISA KEV listing exists at time of analysis, but the attack surface is low-complexity and network-accessible.
Unauthenticated arbitrary file upload in Thinking Software Technology's EFence (versions up to and including 1.2.66, DB Ver:56) lets remote attackers upload executable web shell backdoors and run arbitrary code on the underlying server. The flaw requires no authentication or user interaction over the network, yielding full compromise of confidentiality, integrity, and availability. Reported by TWCERT; no public exploit identified at time of analysis, and EPSS exploitation probability is moderate at 0.68% (50th percentile).
Unauthenticated SQL injection in EFence (Thinking Software Technology) exposes full database read access to remote attackers without credentials. The flaw resides in the web-facing component of the EFence product, where attacker-controlled input is passed unsanitized into SQL queries, enabling arbitrary SELECT operations against the underlying database. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the trivial exploitation conditions (no authentication, no user interaction, network-accessible) make it a high-priority remediation target for any deployment.
Arbitrary file upload in EFence (Thinking Software Technology) versions 1.2.66 and earlier allows authenticated remote attackers to upload web shell backdoors and achieve full arbitrary code execution on the underlying server. The CVSS 4.0 score of 8.7 reflects network-accessible exploitation requiring only low-privilege credentials, with confirmed total technical impact per SSVC. No public exploit has been identified at time of analysis and SSVC rates current exploitation as none, though the Taiwan CERT (TWCERT) has published advisories indicating confirmed vendor awareness.
SQL injection in Thinking Software Technology's Efence (versions ≤ 1.2.66 DB Ver:56) exposes full database contents to unauthenticated remote attackers via the file upload functionality. The CVSS 4.0 score of 8.8 with PR:N and AV:N confirms no credentials are required, and SSVC rates the attack as automatable. No public exploit code or CISA KEV listing exists at time of analysis, but the attack surface is low-complexity and network-accessible.
Unauthenticated arbitrary file upload in Thinking Software Technology's EFence (versions up to and including 1.2.66, DB Ver:56) lets remote attackers upload executable web shell backdoors and run arbitrary code on the underlying server. The flaw requires no authentication or user interaction over the network, yielding full compromise of confidentiality, integrity, and availability. Reported by TWCERT; no public exploit identified at time of analysis, and EPSS exploitation probability is moderate at 0.68% (50th percentile).