【中文导读】该 CVE 涉及任意文件上传（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.