AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.phpReferenceshttps://github.com/loadream/AyaCMS/issues/7