Donglight Bookstore Unrestricted File Upload Vulnerability Leading to Remote Code Execution

A critical vulnerability allowing unrestricted file uploads has been identified in Donglight Bookstore version 1.0. The issue resides in the 'uploadPicture' function of the 'AdminBookController' file. This vulnerability can be exploited remotely, and the uploaded files can be executed within the application's environment.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the application is hosted.

Reproduction

To reproduce this vulnerability, log into the application as an admin and navigate to the book addition page. Upload a file with a '.jsp' extension containing a payload that executes a command, such as opening the calculator application. Once the file is uploaded, the command will be executed on the server.