CVE-2020-20471

CVE-2020-20471 affects White Shark System (WSS) 1.3.2. The vulnerability is in default_user_edit.php and allows unauthorized access with privilege escalation to administrator by remote attackers. CVSS details indicate high impact on confidentiality, integrity, and availability (base score 8.8 / h...

CVE-2020-20470

CVE-2020-20470 affects White Shark System (WSS) 1.3.2. The issue is described as a website physical path leakage/disclosure vulnerability in WSS 1.3.2, with NVD metrics showing a medium base score (CVSS 2.0: 5.0; CVSS 3.1: 5.3) and network attack vector with low complexity. Connected sources cons...

CVE-2020-20470

White Shark System WSS 1.3.2 has web site physical path leakage vulnerability...

CVE-2020-20469

White Shark System (WSS) 1.3.2 contains a SQL injection in log_edit.php caused by an unfiltered csa_to_user parameter, allowing remote attackers to access sensitive database information. Evidence from CVE entries (CVE-2020-20469) and CNVD/Red Hat/PRION mirrors confirms the vulnerability is trigge...

CVE-2020-20469

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the logedit.php files failing to filter the csatouser parameter, remote attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2020-20468

White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...

CVE-2020-20468

White Shark System (WSS) 1.3.2 is affected by CVE-2020-20468, a CSRF vulnerability that allows an attacker to modify a user password via the file user_edit_password.php. The issue is documented in multiple sources (CNVD/CNNVD) as a Cross-Site Request Forgery vulnerability in WSS, enabling passwor...

CVE-2020-20467

White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...

CVE-2020-20467

White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via the default_task_add.php endpoint. A remote attacker could exploit this to create tasks, exposing data. The vulnerability is documented across multiple feeds (CVE-2020-20467 and related entries) with no public de...

CVE-2020-20466

White Shark System (WSS) version 1.3.2 contains an unauthenticated vulnerability in user_edit_password.php allowing remote attackers to modify passwords of arbitrary users. This CVE-2020-20466 entry is corroborated by multiple sources (Red Hat, CNVD, NVD, and other catalogs) and is described as a...

CVE-2020-20466

White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...

White Shark System 信息泄露漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A website physical path disclosure vulnerability exis...

White Shark System 访问控制错误漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

PT-2021-10496 · Unknown · White Shark System

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a web site physical path leakage. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

White Shark System 安全漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

White Shark System SQL注入漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

PT-2021-10493 · Unknown · White Shark System

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue allows remote attackers to exploit the vulnerability and create a task, leading to sensitive information disclosure via the default task add.php endpoint. The default task add.php...

White Shark System 安全漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". An unauthorized access vulnerability exists in...

White Shark System SQL注入漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

White Shark System 跨站请求伪造漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A cross-site request forgery vulnerability exists in...