CVE-2022-50893

9.8CRITICAL

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.

Publicado: 1/13/2026Atualizado: 1/14/2026
Ver no NVDVer no MITRE

Descrição

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

Análise IADesenvolvido por IA

Referências