A profile photo uploader that checks file extension and Content-Type. Spoof the MIME type to bypass the filter and execute a webshell.
Upload a PHP webshell by spoofing the MIME type to bypass the extension filter.