Approved changes feed: RSS · Atom

cpe:2.3:a:4homepages:4images:1.9:*:*:*:*:*:*:*

part: a version: 1.9 update: *

Vendor4Homepages (97415811-15b1-53db-b5ef-7cf34341cafa)
Product4Images (db309d6f-83d9-5868-b90d-bd8bf2de7388)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50806 vulnerable 2026-06-08 05:52:03.615909 4images 1.9 - Remote Command Execution (RCE)
HIGH (7.2)
4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse shell code through template editing functionality. Attackers can save malicious code in the template and execute arbitrary commands by accessing a specific categories.php endpoint with a crafted cat_id parameter.
Published: 2026-01-13T22:51:40.551Z
Updated: 2026-04-07T14:06:27.890Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.