Unrestricted Upload Vulnerability in needyamin Image_Gallery Component

CVE-2025-0722

Summary

A vulnerability has been identified in the needyamin image_gallery component, specifically affecting version 1.0. The flaw resides in the /admin/gallery.php file, where the argument 'image' can be manipulated to facilitate unrestricted file uploads. This security defect can be exploited remotely, posing severe risks to web applications relying on this component. The issue has been made public, and there has been a lack of response from the vendor upon initial disclosure. Immediate action is advised to mitigate potential exploitation.

References