There is a website which takes the user image as the input and processes it and then store it in some directory. I can't see the directory, all i can see in the src attribute of img tag is the name of the php file which is rendering that image.
<img src="rendering-image.php">
Furthermore after uploading image, the website shows the image on the webpage and when I type www.site.com/rendering-image.php
.
It gives me all the raw data of image (not the displayable image).
I inserted some PHP code in between the raw data so that I can manipulate the filters, but it's not working.
The PHP code I entered for testing was
<?php $n3=2+2; echo $n3;?>
After inserting it in the raw data of image, my jpg image raw data looked something like this
ÿØÿà JFIFHHÿápExifMM*;nÒ‡iæ<?php
$n3=2+2; echo $n3;?>¢£–hàŒÉ4‰/VvÀ‰®sQñ•¬ Œfå¿ç¡;#Sø...
I was expecting some answer as the result of PHP execution but I didn't get any answer.
So what's actually happening here? Is there any vulnerability here? If it is then how can I exploit it?