Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50892. PoCs published by Edd13Mora.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in VIAVIWEB Wallpaper Admin 1.0, including SQL injection on the login page and an unauthenticated remote code execution via file upload. The RCE is achieved by uploading a malicious PHP file disguised as an image.
Description
VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials. Attackers can exploit the login page by injecting 'admin' or 1=1-- - payload to gain unauthorized access to the administrative interface.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in VIAVIWEB Wallpaper Admin 1.0, including SQL injection on the login page and an unauthenticated remote code execution via file upload. The RCE is achieved by uploading a malicious PHP file disguised as an image.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N