Skip to content
OpenAdvisories

Vendor

osuuu

5 known vulnerabilities.

Products

LightPicture 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-6574

    osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials

    A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file /public/install/lp.sql of the component API Upload Endpoint. Such manipulation of the argument key leads to hard-coded credentials. The at…

    osuuu LightPicture