Remote unrestricted upload via file parameter

Unrestricted file upload in Yunjing CMS with unknown version allows remote authenticated users to write files through /index/user/upload_img.html. The endpoint accepts the file argument without an effective restriction on uploaded content, so an attacker-controlled file can be stored. The record identifies a low-privilege network gate but does not disclose whether uploaded files execute or permit further compromise.