Read the docs

Wallaceit

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Wallaceit records in CISA KEV

No Wallaceit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wallacepos 4 records MEDIUM

Records

4 records

TI-2019-02964 CVE-2019-3959 · GHSA-43wf-3g3c-6rp7

Cross-site request forgery in WallacePOS

Priority MEDIUM 40

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00832 Published 2019-07-31 No fix listed CWE-352
TI-2019-02965 CVE-2019-3960 · GHSA-32ch-w695-p5qw

Unrestricted file upload in WallacePOS

Priority LOW 37

Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious PHP file.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03019 Published 2019-07-31 No fix listed CWE-434
TI-2019-02963 CVE-2019-3958 · GHSA-fg23-v8v2-8rg6

Cross-site scripting in WallacePOS

Priority LOW 26

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00855 Published 2019-07-31 No fix listed CWE-79
Open these records in search →