CVE-2019-3960

概要

参考情報

• tenable.com/security/research/tra-2019-37 · Exploit

wallacepos のその他の脆弱性

• CVE-2019-3959高 8.8Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate user…
• CVE-2019-3958中 5.4Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS…
• CVE-2017-7388中 6.1A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied…