A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated malicious users to download selling data.
codekop codekop 2.0