CVE-2020-20474

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability

published June 21, 2021

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01669 · 76.6th percentile
Published
2021-06-21T04:07Z
EPSS history
Timeline
  • 21 JUN 04:07Z
    White Shark System (WSS) 1.3.2 has a SQL injection vulnerability
    cvelistv5