CVE-2020-20473

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
References
Link Resource
https://github.com/itodaro/WhiteSharkSystem_cve Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:white_shark_systems_project:white_shark_systems:1.3.2:*:*:*:*:*:*:*

Information

Published : 2021-06-20 22:15

Updated : 2021-06-23 12:18


NVD link : CVE-2020-20473

Mitre link : CVE-2020-20473


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

white_shark_systems_project

  • white_shark_systems