CVE-2019-3960

2019-07-3118:15:11

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious PHP file.

CPENameOperatorVersion
wallaceposeq1.4.0
wallaceposeq1.1
wallaceposeq1.4.3
wallaceposeq1.4.1
wallaceposeq1.2
wallaceposeq1.3

Name	Operator	Version
wallacepos	eq	1.4.0
wallacepos	eq	1.1
wallacepos	eq	1.4.3
wallacepos	eq	1.4.1
wallacepos	eq	1.2
wallacepos	eq	1.3

References

www.tenable.com/security/research/tra-2019-37