UCMS-RCE1.md

There is an arbitrary file upload vulnerability (RCE) in the file management module in UCMS 1.6.

vendor: http://uuu.la/

UCMS 1.6 installation package： http://uuu.la/uploadfile/file/ucms_1.6.zip

After installation, log in to the background

Click File Management

Click uploadfile

Click to select the file, and after selecting the file ---> Click upload to upload to the "uploadfile directory"

We visit the shell.php file from the browser and upload it to the uploadfile directory of the website, and we find that the code has been executed