Authenticated code execution via extension-filter bypass

Unrestricted file upload in mingSoft MCMS 5.3.5 allows remote authenticated users to write arbitrary files through /ms/file/upload.do. ManageFileAction.java checks only the reported filename suffix against a denied-extension list, then uses attacker-controlled path options when transferTo writes the file. A valid management session is required; the published request uses default credentials and writes a JSPX payload into a web-served directory, enabling server-side command execution when requested.