rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-20183 
Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T19:42:20.000Z
CVE-2020-20184 
GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T19:56:28.000Z
CVE-2020-20189 
SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T20:38:02.000Z
CVE-2020-20210 
Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-26T00:00:00.000Z
CVE-2020-20211 
Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:26:20.000Z
CVE-2020-20212 
Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:27:27.000Z
CVE-2020-20213 
Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:28:48.000Z
CVE-2020-20214 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T18:21:41.000Z
CVE-2020-20215 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:29:33.000Z
CVE-2020-20216 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:30:06.000Z
CVE-2020-20217 
Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T11:39:28.000Z
CVE-2020-20218 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-03T15:13:44.000Z
CVE-2020-20219 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:25:16.000Z
CVE-2020-20220 
Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T19:09:29.000Z
CVE-2020-20221 
Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:49:07.000Z
CVE-2020-20222 
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T18:21:55.000Z
CVE-2020-20225 
Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:31:15.000Z
CVE-2020-20227 
Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T19:10:17.000Z
CVE-2020-20230 
Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T16:14:19.000Z
CVE-2020-20231 
Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T13:53:25.000Z
CVE-2020-20236 
Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T18:22:00.000Z
CVE-2020-20237 
Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T18:22:05.000Z
CVE-2020-20245 
Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remote attacker can cause a Denial of Service due to improper memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T19:14:14.000Z
CVE-2020-20246 
Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process. An authenticated remote attacker can cause a Denial of Service due to improper memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T19:11:01.000Z
CVE-2020-20247 
Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-03T15:13:42.000Z
CVE-2020-20248 
Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T17:35:49.000Z
CVE-2020-20249 
Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the resolver process. By sending a crafted packet, an authenticated remote attacker can cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T17:27:54.000Z
CVE-2020-20250 
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T11:59:52.000Z
CVE-2020-20252 
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-13T17:06:57.000Z
CVE-2020-20253 
Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T13:51:38.000Z
CVE-2020-20254 
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-18T13:52:19.000Z
CVE-2020-20262 
Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:25:24.000Z
CVE-2020-20264 
Mikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T11:19:57.000Z
CVE-2020-20265 
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T14:25:53.000Z
CVE-2020-20266 
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T11:20:02.000Z
CVE-2020-20267 
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T14:25:04.000Z
CVE-2020-20269 
A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T18:42:54.000Z
CVE-2020-20276 
An unauthenticated stack-based buffer overflow vulnerability in common.c's handle_PORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T18:09:03.000Z
CVE-2020-20277 
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 due to improper implementation of a chroot jail in common.c's compose_abspath function that can be abused to read or write to arbitrary files on the filesystem, leak process memory, or potentially lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T18:09:00.000Z
CVE-2020-20285 
There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T18:20:33.000Z
CVE-2020-20287 
Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:29.000Z
CVE-2020-20289 
Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:24.000Z
CVE-2020-20290 
Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:21.000Z
CVE-2020-20294 
An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:10.000Z
CVE-2020-20295 
An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:13.000Z
CVE-2020-20296 
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-01T17:38:16.000Z
CVE-2020-20298 
Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T19:00:42.000Z
CVE-2020-20299 
WeiPHP 5.0 does not properly restrict access to pages, related to using POST.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T19:00:17.000Z
CVE-2020-20300 
SQL injection vulnerability in the wp_where function in WeiPHP 5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T19:00:22.000Z
CVE-2020-20335 
Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of service via the editorUpdateRow function in kilo.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20340 
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T19:30:31.000Z
CVE-2020-20341 
YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T19:30:32.000Z
CVE-2020-20343 
WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component that allows attackers to arbitrarily add articles in the administrator background.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:09.000Z
CVE-2020-20344 
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:10.000Z
CVE-2020-20345 
WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:11.000Z
CVE-2020-20347 
WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under the article management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:12.000Z
CVE-2020-20348 
WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the background menu management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:12.000Z
CVE-2020-20349 
WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T21:25:13.000Z
CVE-2020-20363 
Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T17:57:50.000Z
CVE-2020-20389 
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T14:35:18.000Z
CVE-2020-20391 
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T14:43:51.000Z
CVE-2020-20392 
SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T14:56:24.000Z
CVE-2020-20402 
Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-31T00:00:00.000Z
CVE-2020-20406 
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T19:59:53.000Z
CVE-2020-20412 
lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE: this may overlap CVE-2018-5146.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T00:00:00.000Z
CVE-2020-20413 
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-20T00:00:00.000Z
CVE-2020-20425 
S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in the search function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:29:25.000Z
CVE-2020-20426 
S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability in /function/booksave.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T22:29:27.000Z
CVE-2020-20444 
Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T15:51:50.000Z
CVE-2020-20445 
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T17:27:43.000Z
CVE-2020-20446 
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T17:40:59.000Z
CVE-2020-20448 
FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T17:55:04.000Z
CVE-2020-20450 
FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T18:16:09.000Z
CVE-2020-20451 
Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T18:48:18.000Z
CVE-2020-20453 
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T19:15:21.000Z
CVE-2020-20466 
White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T03:57:15.000Z
CVE-2020-20467 
White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the vulnerability to create a task.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T03:59:05.000Z
CVE-2020-20468 
White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:00:58.000Z
CVE-2020-20469 
White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the csa_to_user parameter, remote attackers can exploit the vulnerability to obtain database sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T04:01:51.000Z