Unrestricted file upload

2019-07-3118:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious PHP file.

CPENameOperatorVersion
wallaceposeq1.4.3

CPE	Name	Operator	Version
	wallacepos	eq	1.4.3

References

www.tenable.com/security/research/tra-2019-37