CVE-2025-0722

Name of the Vulnerable Software and Affected Versions needyamin image gallery version 1.0

Description A critical issue was found in the Cover Image Handler component of the file /admin/gallery.php, allowing for unrestricted upload through the manipulation of the image argument. This can be initiated remotely. The issue has been publicly disclosed, and the vendor was contacted but did not respond.

Recommendations needyamin image gallery version 1.0: Avoid using the Cover Image Handler component until a fix is provided by the vendor, and consider implementing alternative security measures to prevent unrestricted uploads.