Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: VIAVIWEB Component: Wallpaper Admin Clear all filters
TI-2022-26348 CVE-2022-50894 · GHSA-2c6v-h7h5-hq25

VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.php

Priority MEDIUM 64

VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the img_id parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00463 Published 2026-01-13 No fix listed CWE-89
TI-2022-26347 CVE-2022-50893 · GHSA-6rqh-4p26-xccx

VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload

Priority HIGH 81

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00987 Published 2026-01-13 No fix listed CWE-434
TI-2022-26346 CVE-2022-50892 · GHSA-g9w5-mvgw-h52h

VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page

Priority HIGH 77

VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00688 Published 2026-01-13 No fix listed CWE-89