WCMS 11 Advertisement Image Handler Unrestricted File Upload Vulnerability

A critical arbitrary file upload vulnerability has been identified in WCMS version 11. This issue resides in the Advertisement Image Handler component, specifically within the 'sub' function of 'app/admin/AdvadminController.php'. The vulnerability allows remote attackers to upload malicious scripts, such as PHP files, which could be executed on the server.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, enabling the execution of malicious scripts on the server.

Reproduction

To reproduce this vulnerability, access the 'Advertisement Image' feature in the WCMS 11 admin panel. The upload functionality does not properly validate file types or contents, allowing the upload of harmful PHP scripts. Once uploaded, these scripts can be executed via the web service.