White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20472
Reference (s):
- https://github.com/itodaro/WhiteSharkSystem_cve