CVE-2022-50894

9.8CRITICAL

VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the img_id parameter. Attackers ca

게시됨: 1/13/2026업데이트됨: 1/14/2026
NVD에서 보기MITRE에서 보기

설명

VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the img_id parameter. Attackers can send GET requests to edit_gallery_image.php with malicious img_id values to extract database information.

AI 분석AI 기반

참조