CVE-2022-35150

The exploit demonstrates an arbitrary file upload vulnerability in Baijiacms via the `url` parameter in the `fetch` operation. The provided HTTP request shows how an attacker can fetch and save a remote file (e.g., a PHP shell) to the target system.