Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, default_user.php files failing to filter the sort parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
White Shark System SQL注入漏洞
Vulnerability Description
White Shark System是开源的一个基于浏览器的协同办公平台，集项目管理、任务管理、工作管理和工作日志管理于一体。 White Shark System (WSS) 1.3.2版本存在SQL注入漏洞。该漏洞源于control_task.php, control_project.php和default_user.php文件未能过滤sort参数。远程攻击者可利用该漏洞获取数据库敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A