CVE-2020-20474

Name of the Vulnerable Software and Affected Versions: White Shark System (WSS) version 1.3.2

Description: The issue is related to a SQL injection vulnerability. It arises from the default task edituser.php files failing to properly filter the csa to user parameter. This allows remote attackers to exploit the vulnerability and obtain sensitive database information.

Recommendations: For White Shark System (WSS) version 1.3.2, as a temporary workaround, consider restricting access to the default task edituser.php file until a patch is available. Avoid using the csa to user parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.