CodeAstro Real Estate Management System Unrestricted File Upload Vulnerability

A vulnerability allowing unauthorized file uploads has been identified in CodeAstro Real Estate Management System version 1.0. The issue resides in the file /submitproperty.php, where an unknown function permits unrestricted file uploads. This vulnerability can be exploited remotely and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, which can lead to remote code execution on the server.

Reproduction

To reproduce this vulnerability, send a POST request to /submitproperty.php with the 'aimage' field set to a PHP file containing a payload, such as a command to be executed on the server. The request should also include other required form data, such as property details and images.