CVE-2022-50893

9.8CRITICAL

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.

发布于: 1/13/2026更新于: 1/14/2026
在NVD查看在MITRE查看

描述

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

AI分析AI驱动

参考资料