PT-2026-2368 · Unknown · Viaviweb Wallpaper Admin

[Edd13Mora] · Publicado 2026-01-13 · Atualizado 2026-01-14 · CVE-2022-50892

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VIAVIWEB Wallpaper Admin version 1.0

Description The software contains a SQL injection issue that allows attackers to bypass authentication. Attackers can manipulate login credentials, specifically by injecting a payload such as 'admin' or 1=1-- - into the login page to gain unauthorized access to the administrative interface. The vulnerable login page is susceptible to SQL injection attacks through manipulation of login credentials. The login page is the entry point for this issue. The vulnerable parameters include the username and password fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2022-50892

Produtos afetados

Viaviweb Wallpaper Admin

Referências · 6

• 🔥 https://exploit-db.com/exploits/51033 · Exploit
• https://viaviweb.com · Nota
• https://vulncheck.com/advisories/viaviweb-wallpaper-admin-sql-injection-via-login-page · Nota
• https://osv.dev/vulnerability/CVE-2022-50892 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011383032544886972 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2022-50892 · Nota de Segurança