CVE-2023-22900

The CVE is for Thinking Software Technology Co., Ltd. Efence — SQL Injection due to insufficient input validation in the login function. Unauthenticated remote attackers can inject arbitrary SQL commands to access, modify, or delete the database. Relevant details in connected sources indicate Efe...

CVE-2023-32754

CVE-2023-32754 affects Thinking Software Efence, where the login function has insufficient input validation, enabling an unauthenticated remote attacker to inject arbitrary SQL commands. The intended impact reported is access, modification, or deletion of database content. Connected sources consi...