CVE-2020-20473

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability

published June 21, 2021

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01669 · 76.6th percentile
Published
2021-06-21T04:06Z
EPSS history
Timeline
  • 21 JUN 04:06Z
    White Shark System (WSS) 1.3.2 has a SQL injection vulnerability
    cvelistv5