Security Advisory

CVE-2022-50894

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-13 22:56:20

Last updated 2026-04-07 14:06:32

Assigner VulnCheck

State PUBLISHED

Description

VIAVIWEB Wallpaper Admin 1.0 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the img_id parameter. Attackers can send GET requests to edit_gallery_image.php with malicious img_id values to extract database information.

← Browse all CVEs View on cve.org ↗