CVE-2023-22900 (published 2023-01-31T00:00:00)
Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.
Affected products: Vendor: Thinking Software Technology Co., Ltd.
Product: Efence
Versions: 1.2.58 DB.ver 28