Skip to content
OpenAdvisories
Unscored CVE-2020-20473 EUVD-2020-13260GHSA-gw37-g74p-jfg6

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, d…

Published Jun 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

References