Vendor
An unrestricted file upload vulnerability in the Criminal-Management-System allows remote attackers to upload arbitrary files via the my_img parameter in home.php.