Wallpaper Admin vulnerabilities

2 known vulnerabilities in Wallpaper Admin from Viaviweb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  VIAVIWEB Wallpaper Admin: Unrestricted Upload of File with Dangerous Type

  CVE-2022-50893Jan 13, 2026Viaviweb

  VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

• 9.8 Critical severity

  VIAVIWEB Wallpaper Admin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-50892Jan 13, 2026Viaviweb

  VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating login credentials. Attackers can exploit the login page by injecting 'admin' or 1=1-- - payload to gain unauthorized access to th