CVE-2022-50893

9.8CRITICAL

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.

Veröffentlicht: 1/13/2026Aktualisiert: 1/14/2026
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

KI-AnalyseKI-gestützt

Referenzen