CVE-2020-20470

CVE-2020-20470 affects White Shark System (WSS) 1.3.2. The issue is described as a website physical path leakage/disclosure vulnerability in WSS 1.3.2, with NVD metrics showing a medium base score (CVSS 2.0: 5.0; CVSS 3.1: 5.3) and network attack vector with low complexity. Connected sources cons...

CVE-2020-20471

CVE-2020-20471 affects White Shark System (WSS) 1.3.2. The vulnerability is in default_user_edit.php and allows unauthorized access with privilege escalation to administrator by remote attackers. CVSS details indicate high impact on confidentiality, integrity, and availability (base score 8.8 / h...

CVE-2020-20473

CVE-2020-20473 affects White Shark System (WSS) 1.3.2. Root cause: unsanitized sort parameter in control_task.php, control_project.php, and default_user.php leading to SQL injection. Remote attackers could obtain sensitive database information. Multiple sources (Red Hat, CNVD, NVD, CVE records) c...

CVE-2020-20467

White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via the default_task_add.php endpoint. A remote attacker could exploit this to create tasks, exposing data. The vulnerability is documented across multiple feeds (CVE-2020-20467 and related entries) with no public de...

CVE-2020-20472

CVE-2020-20472 affects White Shark System (WSS) 1.3.2. The vulnerability is in if_get_addbook.php, which operates without authentication, allowing remote attackers to obtain username information for all users on the current site. The condition arises from lack of access control on that endpoint (...

CVE-2020-20466

White Shark System (WSS) version 1.3.2 contains an unauthenticated vulnerability in user_edit_password.php allowing remote attackers to modify passwords of arbitrary users. This CVE-2020-20466 entry is corroborated by multiple sources (Red Hat, CNVD, NVD, and other catalogs) and is described as a...

CVE-2020-20469

White Shark System (WSS) 1.3.2 contains a SQL injection in log_edit.php caused by an unfiltered csa_to_user parameter, allowing remote attackers to access sensitive database information. Evidence from CVE entries (CVE-2020-20469) and CNVD/Red Hat/PRION mirrors confirms the vulnerability is trigge...

CVE-2020-20468

White Shark System (WSS) 1.3.2 is affected by CVE-2020-20468, a CSRF vulnerability that allows an attacker to modify a user password via the file user_edit_password.php. The issue is documented in multiple sources (CNVD/CNNVD) as a Cross-Site Request Forgery vulnerability in WSS, enabling passwor...

CVE-2020-20474

Vulnerability summary (CVE-2020-20474): White Shark System (WSS) version 1.3.2 contains an SQL injection due to inadequate filtering of the csa_to_user parameter in default_task_edituser.php. This allows remote attackers to potentially retrieve sensitive database information. The connected docume...