Baowzh Hfly Unrestricted File Upload Vulnerability in Upload_json.php

A vulnerability allowing unrestricted file uploads has been identified in Baowzh Hfly versions up to commit 638ff9abe9078bc977c132b37acbe1900b63491c. The issue arises in an unknown function of the file '/Public/Kindeditor/php/upload_json.php', where manipulation of the 'imgFile' argument enables unauthorized file uploads. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which could lead to the execution of malicious files on the server.

Reproduction

The vulnerability can be reproduced by sending a request to '/Public/Kindeditor/php/upload_json.php' with a manipulated 'imgFile' argument that bypasses file upload restrictions. This can be done remotely.