Online_ambulance_booking_service v1.0.2 has other getshell vulnerability

[httpshttpxv]

Source code name：online_ambulance_booking_service
Source code version：v1.0.2

Vulnerability description
There is no restriction on uploading imgages on this page, which leads to uploading webshell
Related pages post-avehical.php

Code audit

There is no restriction on uploading imgages on this page
Upload path /img/vehicleimages,not change imgage name

Vulnerability verification
Open http://localhost/online/admin/post-avehical.php
Upload trojans
http://localhost/online/admin/img/vehicleimages/get.php getshell