Path traversal

White Shark System WSS 1.3.2 has web site physical path leakage vulnerability...

Sql injection

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the controltask.php, controlproject.php, defaultuser.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

Design/Logic Flaw

White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...

Sql injection

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the logedit.php files failing to filter the csatouser parameter, remote attackers can exploit the vulnerability to obtain database sensitive information...

Sql injection

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2020-20467

White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...

CVE-2020-20466

White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...

CVE-2020-20467

White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...

CVE-2020-20468

White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...

CVE-2020-20468

White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...

CVE-2020-20466

White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...

Default credentials

White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...

Cross site request forgery (csrf)

White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...

Information disclosure

White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...

CVE-2020-20474

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2020-20474

Vulnerability summary (CVE-2020-20474): White Shark System (WSS) version 1.3.2 contains an SQL injection due to inadequate filtering of the csa_to_user parameter in default_task_edituser.php. This allows remote attackers to potentially retrieve sensitive database information. The connected docume...

CVE-2020-20473

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the controltask.php, controlproject.php, defaultuser.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2020-20472

CVE-2020-20472 affects White Shark System (WSS) 1.3.2. The vulnerability is in if_get_addbook.php, which operates without authentication, allowing remote attackers to obtain username information for all users on the current site. The condition arises from lack of access control on that endpoint (...

CVE-2020-20472

White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...

CVE-2020-20471

White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...