POSNIC 1.02 Directory Listing / File Upload

POSNIC version 1.02 suffers from directory listing and file upload exposure vulnerabilities.