Arbitrary File Upload Vulnerability in ThinkSNS

The Arbitrary File Upload Vulnerability in ThinkSNS can cause website intrusion and user data leakage. Are you at a high risk?
The arbitrary file upload vulnerability exists in the document uploading area of the ThinkSNS group. This vulnerability can cause four websites to fall and user data leakage. Are you at a high risk?

1. Open a group to upload documents.

 

2. Start the packet capture, upload an image, such as yy.jpg, and change it to yy. php.

 
3. the upload is successful.

 

Look at the file, amount ~~~~

 

4. Connection

 

5. Cross-region

 

6. Take a look at the data

 
 

 

Solution:

You must understand this!