QueryMine SMS Unrestricted File Upload Vulnerability in Background Management Component

A remote code execution vulnerability has been identified in QueryMine SMS versions prior to 7ab5a9ea196209611134525ffc18de25c57d9593. The issue arises in the Background Management Page, specifically within the admin/addteacher.php file. The vulnerability allows for unrestricted file uploads by manipulating the 'image' argument, enabling attackers to upload malicious files that could be executed on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server, where uploaded malicious files can be executed, potentially leading to unauthorized access, data theft, or disruption of services.

Reproduction

To reproduce this vulnerability, upload a file through the image upload feature in the admin/addteacher.php page. The uploaded file should be a PHP script, which can then be executed via the web server.