Skip to content
Noroxi

wallaceit records

4 published records for vendor wallaceit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2019-3959
    35Monitor

    Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate user

    HighCVSS 8.8No exploitEPSS 1%

    wallaceit · wallaceposJul 31, 2019

  • CVE-2019-3960
    29Monitor

    Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by upl

    HighCVSS 7.2No exploitEPSS 3%

    wallaceit · wallaceposJul 31, 2019

  • CVE-2017-7388
    24Monitor

    A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'.

    MediumCVSS 6.1No exploitEPSS 1%

    wallaceit · wallaceposMar 31, 2017

  • CVE-2019-3958
    21Monitor

    Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS

    MediumCVSS 5.4No exploitEPSS 1%

    wallaceit · wallaceposJul 31, 2019