White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20469
Reference (s):
- https://github.com/itodaro/WhiteSharkSystem_cve