Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-20264 State: PUBLISHED Published: 2021-05-19T11:19:57 Last Updated: 2024-08-04T14:15:28.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_netwatch/README.md - https://seclists.org/fulldisclosure/2021/May/11
CVE ID: CVE-2020-20265 State: PUBLISHED Published: 2021-05-11T14:25:53 Last Updated: 2024-08-04T14:15:29.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2021/May/12 - https://seclists.org/fulldisclosure/2021/May/11
CVE ID: CVE-2020-20266 State: PUBLISHED Published: 2021-05-19T11:20:02 Last Updated: 2024-08-04T14:15:29.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_dot1x/README.md - https://seclists.org/fulldisclosure/2021/May/11
CVE ID: CVE-2020-20267 State: PUBLISHED Published: 2021-05-11T14:25:04 Last Updated: 2024-08-04T14:15:28.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2021/May/12
CVE ID: CVE-2020-20269 State: PUBLISHED Published: 2021-01-22T18:42:54 Last Updated: 2024-08-04T14:15:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/careteditor/issues/issues/841 - https://github.com/careteditor/releases-beta/releases/tag/4.0.0-rc22 - https://caret.io - https://seclists.org/fulldisclosure/2021/Jan/59 - http://seclists.org/fulldisclosure/2021/Jan/59 - http://packetstormsecurity.com/files/161072/Caret-Editor-4.0.0-rc21-Remote-Code-Execution.html
CVE ID: CVE-2020-20276 State: PUBLISHED Published: 2020-12-18T18:09:03 Last Updated: 2024-08-04T14:15:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated stack-based buffer overflow vulnerability in common.c's handle_PORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/troglobit/uftpd/commit/0fb2c031ce0ace07cc19cd2cb2143c4b5a63c9dd - https://arinerron.com/blog/posts/6
CVE ID: CVE-2020-20277 State: PUBLISHED Published: 2020-12-18T18:09:00 Last Updated: 2024-08-04T14:15:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/troglobit/uftpd/commit/455b47d3756aed162d2d0ef7f40b549f3b5b30fe - https://arinerr
iner: References: - https://github.com/troglobit/uftpd/commit/455b47d3756aed162d2d0ef7f40b549f3b5b30fe - https://arinerron.com/blog/posts/6 - http://packetstormsecurity.com/files/167908/uftpd-2.10-Directory-Traversal.html
CVE ID: CVE-2020-20285 State: PUBLISHED Published: 2020-12-18T18:20:33 Last Updated: 2024-08-04T14:15:28.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iohex/ZZCMS/blob/master/zzcms2019_login_xss.md
CVE ID: CVE-2020-20287 State: PUBLISHED Published: 2021-02-01T17:38:29 Last Updated: 2024-08-04T14:15:28.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.yccms.net/ - https://blog.jiguang.xyz/posts/remote-code-execution-via-upload-image/
CVE ID: CVE-2020-20289 State: PUBLISHED Published: 2021-02-01T17:38:24 Last Updated: 2024-08-04T14:15:28.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.yccms.net/ - https://blog.jiguang.xyz/posts/yccms-sql-injection/
CVE ID: CVE-2020-20290 State: PUBLISHED Published: 2021-02-01T17:38:21 Last Updated: 2024-08-04T14:15:28.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jiguang.xyz/posts/yccms-directory-traversal-vulnerability-report/
CVE ID: CVE-2020-20294 State: PUBLISHED Published: 2021-02-01T17:38:10 Last Updated: 2024-08-04T14:15:29.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arterli/CmsWing/issues/49
CVE ID: CVE-2020-20295 State: PUBLISHED Published: 2021-02-01T17:38:13 Last Updated: 2024-08-04T14:15:29.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arterli/CmsWing/issues/50
CVE ID: CVE-2020-20296 State: PUBLISHED Published: 2021-02-01T17:38:16 Last Updated: 2024-08-04T14:15:28.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arterli/CmsWing/issues/51
CVE ID: CVE-2020-20298 State: PUBLISHED Published: 2020-12-18T19:00:42 Last Updated: 2024-08-04T14:15:29.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://y4er.com/post/zzzphp-rce/
CVE ID: CVE-2020-20299 State: PUBLISHED Published: 2020-12-18T19:00:17 Last Updated: 2024-08-04T14:15:29.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeiPHP 5.0 does not properly restrict access to pages, related to using POST. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Y4er/Y4er.com/blob/master/content/post/weiphp5-unauthorized.md
CVE ID: CVE-2020-20300 State: PUBLISHED Published: 2020-12-18T19:00:22 Last Updated: 2024-08-04T14:15:29.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the wp_where function in WeiPHP 5.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Y4er/Y4er.com/blob/master/content/post/weiphp-exp-sql.md
CVE ID: CVE-2020-20335 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T19:54:24.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via the editorUpdateRow function in kilo.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/antirez/kilo/issues/60
CVE ID: CVE-2020-20340 State: PUBLISHED Published: 2021-09-01T19:30:31 Last Updated: 2024-08-04T14:15:29.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mntn0x/POC/blob/master/S-CMS/S-CMS-SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2020-20341 State: PUBLISHED Published: 2021-09-01T19:30:32 Last Updated: 2024-08-04T14:15:29.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/44
CVE ID: CVE-2020-20343 State: PUBLISHED Published: 2021-09-01T21:25:09 Last Updated: 2024-08-04T14:15:29.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component that allows attackers to arbitrarily add articles in the administrator background. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/8
CVE ID: CVE-2020-20344 State: PUBLISHED Published: 2021-09-01T21:25:10 Last Updated: 2024-08-04T14:15:29.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/9
CVE ID: CVE-2020-20345 State: PUBLISHED Published: 2021-09-01T21:25:11 Last Updated: 2024-08-04T14:15:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box. Additional Analyst Notes: - CVE Program Container: References: - http://wtcms.com - https://github.com/taosir/wtcms - https://github.com/taosir/wtcms/issues/10
CVE ID: CVE-2020-20347 State: PUBLISHED Published: 2021-09-01T21:25:12 Last Updated: 2024-08-04T14:15:29.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under the article management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/11
CVE ID: CVE-2020-20348 State: PUBLISHED Published: 2021-09-01T21:25:12 Last Updated: 2024-08-04T14:15:29.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the background menu management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/11
CVE ID: CVE-2020-20349 State: PUBLISHED Published: 2021-09-01T21:25:13 Last Updated: 2024-08-04T14:22:24.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taosir/wtcms/issues/11
CVE ID: CVE-2020-20363 State: PUBLISHED Published: 2021-07-08T17:57:50 Last Updated: 2024-08-04T14:22:24.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://pbootcms.com - https://github.com/hnaoyun/PbootCMS - https://github.com/wind226/CVE/issues/1
CVE ID: CVE-2020-20389 State: PUBLISHED Published: 2021-06-23T14:35:18 Last Updated: 2024-08-04T14:22:24.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1321
CVE ID: CVE-2020-20391 State: PUBLISHED Published: 2021-06-23T14:43:51 Last Updated: 2024-08-04T14:22:24.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1322
CVE ID: CVE-2020-20392 State: PUBLISHED Published: 2021-06-23T14:56:24 Last Updated: 2024-08-04T14:22:25.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/peacexie/imcat/issues/5
CVE ID: CVE-2020-20402 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:40:35.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Westbrookadmin/portfolioCMS/issues/2
CVE ID: CVE-2020-20406 State: PUBLISHED Published: 2020-09-16T19:59:53 Last Updated: 2024-08-04T14:22:24.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/elementor/#developers
CVE ID: CVE-2020-20412 State: PUBLISHED Published: 2020-12-26T00:00:00 Last Updated: 2024-08-04T14:22:24.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE: this may overlap CVE-2018-5146. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stepmania/stepmania/issues/1890
CVE ID: CVE-2020-20413 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T19:53:25.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md
CVE ID: CVE-2020-20425 State: PUBLISHED Published: 2021-12-22T22:29:25 Last Updated: 2024-08-04T14:22:24.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function. Additional Analyst Notes: - CVE Program Container: References: - https://www.s-cms.cn/ - http://government.com - https://github.com/Sea0o/vulnerability/issues/1
CVE ID: CVE-2020-20426 State: PUBLISHED Published: 2021-12-22T22:29:27 Last Updated: 2024-08-04T14:22:25.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.s-cms.cn/ - http://government.com - https://github.com/Sea0o/vulnerability/issues/2
CVE ID: CVE-2020-20444 State: PUBLISHED Published: 2021-06-16T15:51:50 Last Updated: 2024-08-04T14:22:25.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability . Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/23.html - https://github.com/jact/openclinic/issues/8
CVE ID: CVE-2020-20445 State: PUBLISHED Published: 2021-05-25T17:27:43 Last Updated: 2024-08-04T14:22:24.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7996 - https://www.debian.org/security/2021/dsa-4990 - https://www.debian.org/security/2021/dsa-4998 - https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE ID: CVE-2020-20446 State: PUBLISHED Published: 2021-05-25T17:40:59 Last Updated: 2024-08-04T14:22:25.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7995 - https://www.debian.org/security/2021/dsa-4990 - https://www.debian.org/security/2021/dsa-4998 - https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE ID: CVE-2020-20448 State: PUBLISHED Published: 2021-05-25T17:55:04 Last Updated: 2024-08-04T14:22:24.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7990
CVE ID: CVE-2020-20450 State: PUBLISHED Published: 2021-05-25T18:16:09 Last Updated: 2024-08-04T14:22:25.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7993 - https://www.debian.org/security/2021/dsa-4998
CVE ID: CVE-2020-20451 State: PUBLISHED Published: 2021-05-25T18:48:18 Last Updated: 2024-08-04T14:22:25.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8094 - https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE ID: CVE-2020-20453 State: PUBLISHED Published: 2021-05-25T19:15:21 Last Updated: 2024-08-04T14:22:24.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8003 - https://www.debian.org/security/2021/dsa-4990 - https://www.debian.org/security/2021/dsa-4998 - https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE ID: CVE-2020-20466 State: PUBLISHED Published: 2021-06-21T03:57:15 Last Updated: 2024-08-04T14:22:24.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve
CVE ID: CVE-2020-20467 State: PUBLISHED Published: 2021-06-21T03:59:05 Last Updated: 2024-08-04T14:22:24.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the vulnerability to create a task. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve - https://cwe.mitre.org/data/definitions/472.html
CVE ID: CVE-2020-20468 State: PUBLISHED Published: 2021-06-21T04:00:58 Last Updated: 2024-08-04T14:22:25.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve
CVE ID: CVE-2020-20469 State: PUBLISHED Published: 2021-06-21T04:01:51 Last Updated: 2024-08-04T14:22:24.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve
CVE ID: CVE-2020-20470 State: PUBLISHED Published: 2021-06-21T04:03:05 Last Updated: 2024-08-04T14:22:25.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/209.html - https://github.com/itodaro/WhiteSharkSystem_cve
CVE ID: CVE-2020-20471 State: PUBLISHED Published: 2021-06-21T04:04:22 Last Updated: 2024-08-04T14:22:24.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerability to escalate to admin privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve
CVE ID: CVE-2020-20472 State: PUBLISHED Published: 2021-06-21T04:05:47 Last Updated: 2024-08-04T14:22:24.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authentication operation. Remote attackers can obtain username information for all users of the current site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/WhiteSharkSystem_cve