There is a website which takes the user image as the input and processes it and then store it in some directory. I can't see the directory, all i can see in the src attribute of img tag is the name of the php file which is rendering that image.
Furthermore after uploading image, the website shows the image on the webpage and when I type
It gives me all the raw data of image (not the displayable image).
I inserted some PHP code in between the raw data so that I can manipulate the filters, but it's not working.
The PHP code I entered for testing was
<?php $n3=2+2; echo $n3;?>
After inserting it in the raw data of image, my jpg image raw data looked something like this
ÿØÿà JFIFHHÿápExifMM*;nÒ‡iæ<?php $n3=2+2; echo $n3;?>¢£–hàŒÉ4‰/VvÀ‰®sQñ•¬ Œfå¿ç¡;#Sø...
I was expecting some answer as the result of PHP execution but I didn't get any answer.
So what's actually happening here? Is there any vulnerability here? If it is then how can I exploit it?