Wallpaper Admin
Approved changes feed: RSS · Atom
cpe:2.3:a:viaviweb:wallpaper_admin:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Viaviweb (f73ef97f-2ced-5668-b736-541cb55db6f7) |
|---|---|
| Product | Wallpaper Admin (045b80ce-36f4-5e5a-964b-1aa364793be9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-50894 |
vulnerable | 2026-06-08 05:52:03.662991 |
VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.php
MEDIUM (6.5)
VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the img_id parameter. Attackers can send GET requests to edit_gallery_image.php with malicious img_id values to extract database information.
Published: 2026-01-13T22:56:20.742Z
Updated: 2026-04-07T14:06:32.083Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50893 |
vulnerable | 2026-06-08 05:52:03.662551 |
VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload
CRITICAL (9.8)
VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.
Published: 2026-01-13T22:56:15.339Z
Updated: 2026-04-07T14:06:31.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50892 |
vulnerable | 2026-06-08 05:52:03.662109 |
VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page
HIGH (8.2)
VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials. Attackers can exploit the login page by injecting 'admin' or 1=1-- - payload to gain unauthorized access to the administrative interface.
Published: 2026-01-13T22:56:08.890Z
Updated: 2026-04-07T14:06:30.459Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.