File upload command execution at advertising management

This is the base information of the website. It is obviously the latest version of the feehi cms. And in the advertising management of feehi cms v2.1.1, you can upload PHP file by changing the image suffix to PHP, resulting in command execution.

![image](https://user-images.githubusercontent.com/55179364/176199547-6ba8137e-17e4-4d18-aa0a-d5988583b7e3.png)
![image](https://user-images.githubusercontent.com/55179364/176199640-4bd0652a-b684-4f23-9fba-502fad3ebc87.png)
<img width="944" alt="phpin3re" src="https://user-images.githubusercontent.com/55179364/176220994-f880fda4-2a63-44ce-a554-337b83c59972.png">
<img width="1014" alt="phpin1" src="https://user-images.githubusercontent.com/55179364/176221056-04b3f1ba-8473-4a51-a24c-e82388b945ef.png">
<img width="780" alt="phpin2" src="https://user-images.githubusercontent.com/55179364/176221075-0803703e-85f2-4ba2-b83d-68fd3f35b97a.png">


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

File upload command execution at advertising management #62

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development