A vulnerability in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to version 3.5 allows unrestricted file upload via the DiyFileUpload function in /ws.asmx. This flaw permits remote attackers to upload arbitrary files without restriction. Public exploit code is available, but the vendor has not responded or issued a fix.