School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
school event management system project school event management system 1.0