Package · Packagist

helloxz/imgurl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.1

CVE-2022-29305

SQL injection in helloxz/imgurl

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.

helloxz/imgurl Packagist

May 24, 2022
Medium 5.4

CVE-2021-38713

Cross-site scripting in imgURL

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

helloxz/imgurl Packagist

Aug 16, 2021