HOME VULNERABILITIES VENDORSVideo Sharing Website Project

Video Sharing Website ProjectCVEs & Vulnerabilities

1 CVEs affecting Video Sharing Website Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

video sharing website 1

CVE-2021-45255CRITICAL

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.

21 Dec 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database