Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gw37-g74p-jfg6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

EPSS

Процентиль: 49%
0.00256
Низкий

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
больше 4 лет назад

White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.

EPSS

Процентиль: 49%
0.00256
Низкий

Дефекты

CWE-89