Frog CMS 0.9.5 has a file upload Vulnerability in /admin/?/plugin/file_manager/save

[snappyJack]

When I check this function ,I found out in line 176 ,we can see if filename did not exists,we can also upload a new file and new content throuth save() function,and in line 189, file create directly.

then i try to upload a new filename and new content in this request

and the code is running