Hzmanyun Education and Training System Unrestricted File Upload Vulnerability

A critical vulnerability allowing unrestricted file uploads has been identified in the Hzmanyun Education and Training System version 3.1.1. The issue arises in the 'saveImage' function, where improper handling of the 'file' argument enables remote attackers to upload potentially malicious files.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which could be used to upload malicious scripts or files that could be executed on the server, leading to various types of attacks such as remote code execution.