CVE-2020-20473

EUVD-2020-13260
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
white_shark_systems_projectwhite_shark_systems
1.3.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/itodaro/WhiteSharkSystem_cve
https://github.com/itodaro/WhiteSharkSystem_cve