File Upload Vulnerabilities

He has noticed a couple of things about the site's profile image upload function.

A hacker
example.com/profile/edit
YOUR PROFILE
An anonymous profile
 USERNAME
Mal