CVE-2022-50893

9.8CRITICAL

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.

Publicado: 1/13/2026Actualizado: 1/14/2026
Ver en NVDVer en MITRE

Descripción

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

Análisis IAImpulsado por IA

Referencias