Imgurl

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29305 PHP HIGH POC This Week

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

SQLi Imgurl

NVD GitHub

CVSS 3.1

8.1

EPSS

0.9%

CVE-2021-38713 PHP MEDIUM POC This Month

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Imgurl

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2022-29305 PHP

EPSS 1% CVSS 8.1

HIGH POC This Week

SQLi Imgurl

NVD GitHub

CVE-2021-38713 PHP

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS Imgurl

NVD GitHub