xpshop网店系统任意文件上传漏洞

### 简要描述： ### 详细说明： ``` 官方：http://www.xpshop.cn ``` [<img src="https://images.seebug.org/upload/201504/15211722ef4d22b553cb432e262d48118cf7493e.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211722ef4d22b553cb432e262d48118cf7493e.jpg) ``` 官方demo站：http://enframe.xpshop.cn/ ``` [<img src="https://images.seebug.org/upload/201504/15211756979e58177be728ea299bf4612d7ba63b.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211756979e58177be728ea299bf4612d7ba63b.jpg) 用户中心，添加场景。直接上传任意格式文件,上传一句话 [<img src="https://images.seebug.org/upload/201504/152118220752c9d5f922491803116af20cbd722a.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/152118220752c9d5f922491803116af20cbd722a.jpg) [<img src="https://images.seebug.org/upload/201504/15211854ac1e3c82eab1f63fdf7db41bf5db73e1.jpg" alt="4.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211854ac1e3c82eab1f63fdf7db41bf5db73e1.jpg) [<img src="https://images.seebug.org/upload/201504/15211940decec29e122fca2daf6278cee94c636b.jpg" alt="5.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211940decec29e122fca2daf6278cee94c636b.jpg) ### 漏洞证明： RS