Remote Code Execution Vulnerability in Sourcecodester Modern Image Gallery App
CVE-2025-70457

9.8CRITICAL

Key Information:

Vendor

Sourcecodester
Status
Modern Image Gallery App
Vendor
CVE Published:
23 January 2026

What is CVE-2025-70457?

A critical vulnerability in the Sourcecodester Modern Image Gallery App v1.0 allows unauthenticated attackers to exploit improper file validation in the gallery/upload.php component. By disguising PHP files as image files, attackers can upload malicious code, which can lead to a complete compromise of the affected system.

References

https://www.sourcecodester.com/php/18572/modern-image-gal...
https://github.com/ismaildawoodjee/vulnerability-research...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.