Viaviweb vulnerabilities
We track 2 vulnerabilities in Viaviweb products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Viaviweb vulnerabilities
- 9.8 Critical severity
VIAVIWEB Wallpaper Admin: Unrestricted Upload of File with Dangerous Type
VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.
- 9.8 Critical severity
VIAVIWEB Wallpaper Admin: Improper Neutralization of Special Elements used in an SQL Command
VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials. Attackers can exploit the login page by injecting 'admin' or 1=1-- - payload to gain unauthorized access to th