215 matches found
Sql injection
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the logedit.php files failing to filter the csatouser parameter, remote attackers can exploit the vulnerability to obtain database sensitive information...
Sql injection
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20468
White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...
CVE-2020-20466
White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...
CVE-2020-20467
White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...
CVE-2020-20467
White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...
CVE-2020-20468
White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...
CVE-2020-20466
White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...
Information disclosure
White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...
Cross site request forgery (csrf)
White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...
Default credentials
White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...
CVE-2020-20474
Vulnerability summary (CVE-2020-20474): White Shark System (WSS) version 1.3.2 contains an SQL injection due to inadequate filtering of the csa_to_user parameter in default_task_edituser.php. This allows remote attackers to potentially retrieve sensitive database information. The connected docume...
CVE-2020-20474
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20473
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the controltask.php, controlproject.php, defaultuser.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20472
CVE-2020-20472 affects White Shark System (WSS) 1.3.2. The vulnerability is in if_get_addbook.php, which operates without authentication, allowing remote attackers to obtain username information for all users on the current site. The condition arises from lack of access control on that endpoint (...
CVE-2020-20472
White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...
CVE-2020-20471
CVE-2020-20471 affects White Shark System (WSS) 1.3.2. The vulnerability is in default_user_edit.php and allows unauthorized access with privilege escalation to administrator by remote attackers. CVSS details indicate high impact on confidentiality, integrity, and availability (base score 8.8 / h...
CVE-2020-20471
White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...
CVE-2020-20470
CVE-2020-20470 affects White Shark System (WSS) 1.3.2. The issue is described as a website physical path leakage/disclosure vulnerability in WSS 1.3.2, with NVD metrics showing a medium base score (CVSS 2.0: 5.0; CVSS 3.1: 5.3) and network attack vector with low complexity. Connected sources cons...