l1l1l1l1l1l

Administrator Interface SSTI Vulnerability

2

[com.jflyfox.modules.filemanager.FileManagerController#index](https://github.com/jflyfox/jfinal_cms/blob/master/src/main/java/com/jflyfox/modules/filemanager/FileManagerController.java#L126l) ``` else if (request.getMethod().equals("POST")) { if (mode == null) { mode = "upload"; responseData = fm.add(); putTextarea = true; } else if (mode.equals("savefile")) { if (needPath && fm.setGetContent("content", request.getParameter("content")))...