1262 matches found
CVE-2020-20470
White Shark System WSS 1.3.2 has web site physical path leakage vulnerability...
CVE-2020-20474
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20472
White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...
CVE-2020-20471
White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...
CVE-2020-20471
White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...
CVE-2020-20472
White Shark System WSS 1.3.2 has a sensitive information disclosure vulnerability. The ifgetaddbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site...
CVE-2020-20474
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20470
White Shark System WSS 1.3.2 has web site physical path leakage vulnerability...
Path traversal
White Shark System WSS 1.3.2 has web site physical path leakage vulnerability...
Sql injection
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the controltask.php, controlproject.php, defaultuser.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
Sql injection
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the logedit.php files failing to filter the csatouser parameter, remote attackers can exploit the vulnerability to obtain database sensitive information...
Design/Logic Flaw
White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...
Sql injection
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2020-20467
White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...
CVE-2020-20466
White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...
CVE-2020-20467
White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...
CVE-2020-20466
White Shark System WSS 1.3.2 is vulnerable to unauthorized access via usereditpassword.php, remote attackers can modify the password of any user...
CVE-2020-20468
White Shark System WSS 1.3.2 is vulnerable to CSRF. Attackers can use the usereditpassword.php file to modify the user password...