arbitrary file upload

[veo]

Users can upload files to their own designated directory, which will cause security problems

Uploading to these files in Linux will cause RCE：

~/.ssh/authorized_keys
/etc/cron.d/*
/var/spool/cron/*
/etc/crontab

POC:

file in /etc