CVE-2020-20473 – White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vul

4 years ago

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20473

Reference (s):

https://github.com/itodaro/WhiteSharkSystem_cve