# waiting for a real PoC
A user that have access to the image upload feature can :
     Upload a .png file with a php code inside
     Rename this .png file to .php
     Run it on : www.exemple.com/images/common/evil.php