Joomla Simple Photo Gallery component version 1 suffers from a remote shell upload vulnerability.