4images 1.9 - Remote Command Execution (RCE)
Priority MEDIUM 42CWE-94Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.
Summary
4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse shell code through template editing functionality. Attackers can save malicious code in the template and execute arbitrary commands by accessing a specific categories.php endpoint with a crafted cat_id parameter.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01293 70th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| 4Homepages | 4images | 1.9 | — | No fix listed | CNA |
- 4images Vendor4Homepages Affected 1.9 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:4homepages:4images:1.9:*:*:*:*:*:*:* | 1.9 | Vulnerable | 4Homepages |
- cpe:2.3:a:4homepages:4images:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·4Homepages
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-50806
- 2026-10-03 Alias added: GHSA-r2jm-vp5j-vxhh
References
Exploit 1
More 4Homepages 4images vulnerabilities
- TI-2006-05052 SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated… CVSS 2.0HIGH 7.5
- TI-2012-00936 SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to… CVSS 2.0HIGH 7.5
- TI-2009-02039 Directory traversal vulnerability in global.php in 4images before 1.7.7, when… CVSS 2.0MEDIUM 6.8
- TI-2012-00937 Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers… CVSS 2.0MEDIUM 5.8
- TI-2021-08829 A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version… CVSS 3.1MEDIUM 4.8
- TI-2020-18297 4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS)… CVSS 3.1MEDIUM 4.8
Sources
- CVE-2022-50806 · CVE Program
- CVE-2022-50806 · NVD
- FIRST EPSS
- GHSA-r2jm-vp5j-vxhh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences