Security Advisory

CVE-2020-20473

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-21 04:06:47
Last updated 2024-08-04 14:22:25
Assigner mitre
State PUBLISHED

Description

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.