UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.Referenceshttps://github.com/cc-225/ucms_v1.6/issues/1
