CVE-2020-20473: Improper Neutralization of Special Elements used in an SQL Command

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the controltask.php, controlproject.php, defaultuser.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...