CVE-2025-0722: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

PT-2020-16917

Name of the Vulnerable Software and Affected Versions SourceCodester Alumni Management System version 1.0 Description The issue concerns cross-site scripting XSS in the /admin/gallery.php endpoint. After admin authentication, an attacker can upload an image to the gallery using a XSS payload in t...

CVE-2020-10225: Unrestricted Upload of File with Dangerous Type

An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution...