description: Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote, authenticated attacker to execute arbitrary code by uploading a malicious PHP file.
problem types: Authenticated Unrestricted File Upload RCE
affected:
{
product: WallacePOS
vendor: n/a
versions:
status: affected, version: 1.4.3
}