School Event Management System Arbitrary File Upload Vulnerability

School Event Management System is a school event management system. An arbitrary file upload vulnerability exists in School Event Management System version 1.0, which can be exploited to upload arbitrary files with the help of event/controller.php?action=photos URL...