high7.5
CVE-2020-20474
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability.
Impact
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing to filter the csa_to_user parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| White Shark Systems Project | White Shark Systems | Version 1.3.2 |