Lesson:
File Upload Vulnerabilities
Public previewWant everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
Train my teamUnsurprisingly, his profile looks broken - the file he uploaded is not a valid image. However, the script now lives on the server.

example.com/profile/edit
YOUR PROFILE
USERNAME
Mal